Help Center> Relational Database Service> User Guide> Working with RDS for SQL Server> Account and Network Security> Using DBSS (Recommended)
Updated on 2024-04-11 GMT+08:00
View PDF

Using DBSS (Recommended)

Database Security Service (DBSS) is an intelligent database security service. Based on the machine learning mechanism and big data analytics technologies, it can audit your databases, detect SQL injection attacks, and identify high-risk operations.

You are advised to use DBSS to provide extended data security capabilities. For details, see Database Security Service.

Advantages

  • DBSS can help you meet security compliance requirements.
    • DBSS can help you comply with DJCP (graded protection) standards for database audit.
    • DBSS can help you comply with security laws and regulations, and provide compliance reports that meet data security standards (such as Sarbanes-Oxley).
  • DBSS can back up and restore database audit logs and meet the audit data retention requirements.
  • DBSS can monitor risks, sessions, session distribution, and SQL distribution in real time.
  • DBSS can report alarms for risky behavior and attacks and respond to database attacks in real time.
  • DBSS can locate internal violations and improper operations and keep data assets secure.

Deployed in bypass pattern, database audit can perform flexible audits on the database without affecting user services.

  • Database audit monitors database logins, operation types (data definition, operation, and control), and operation objects based on risky operations to effectively audit the database.
  • Database audit analyzes risks and sessions, and detects SQL injection attempts so you can stay apprised of your database status.
  • Database audit provides a report template library to generate daily, weekly, or monthly audit reports according to your configurations. It sends real-time alarm notifications to help you obtain audit reports in a timely manner.