The Database Threat
The database is at the nexus of all dynamic, data-driven information. Since a system’s security is only as strong as it’s weakest link, it is critical that a comprehensive security evaluation include database security testing. Rugulations require and customers expect non-repudiation of data in storage. The only way to be sure is through comprehensive testing.

Identifying, Modeling, and Eliminating the Threat:
QuietMove’s Database Security Analysis and Assessment
QuietMove combies Application Security Inc’s AppDetective software with manual analysis and testing techniques by testing experts to offer the most comprehensive database security assessment available.

QuietMove uses AppDetective software to discover database applications within your infrastructure and assesses their security strength. In contrast to piecemeal solutions, AppDetective modules allow enterprises to assess two primary application tiers - application middleware, and back-end databases. Backed by a proven security methodology and extensive knowledge of application-level vulnerabilities, AppDetective locates, examines, reports, and, with your approval, can fix database security holes and misconfigurations.

QuietMove couples the powerful AppDetective software’s capabilities with our professional, experienced consultants who manually validate all scanner results, review system and architecture configuration, and attempt (with your permission) to exploit and penetrate identified vulnerabilities.

After completing technical testing, QuietMove consultants will review and compare your database architecture and configuration with regulatory compliance requirements, your policies, and industry best practices. We will document identified threats and and model the risks present in your enterprise. We will also produce a Compliance Roadmap which will move you from your current to your desired database security posture.

QuietMove is currently equipped to evaluate and assess the security of the following database platforms:

• Microsoft SQL Server
• MySQL
• Oracle
• Sybase
• IBM DB2
• IBM DB2 on Mainframe
• Oracle Application Server
• Lotus Notes/Domino

For more information about our Database Security Analysis Assessment services, contact us.