Development of database auditing infrastructure
Zubaria Noreen, Irfan Hameed, Anila Usman · 2009
A database is considered as a core asset of an organization. Information about customers, employees and employers of the organization is stored in the database. Allowing authorized access to information and it's shielding against unauthorized access is always given prime importance and is of great concern to the stakeholders of the organization. The work presented here outlines the development of a Database Auditing Infrastructure (DAI). The test bed for this infrastructure is chosen as MS SQL Server 2005. Database security is a vast and complicated discipline. Database auditing is the facilitating activity for implementing database security. Triggers, default trace, service brokers, queues, information from system databases are used in the implementation of DAI. Here a customized methodology, comprising of several ways has been adapted for implementing auditing in a database. The DAI presented in this paper is a generic one that can be easily integrated with an existing database. Once deployed the DAI starts providing auditing services to Information System Auditors (ISA) through its web based interface.