1

Data reduction detection

By default, database audit provides a risky operation detection rule to audit all databases. If the amount of operated data exceeds the preset threshold, DBSS sends an alarm notification to administrators and records this event in an SQL statement to protect user data from leakage.

Commercial use

Adding Risky Operations

Viewing SQL Statement Details

1

Email settings function removed

The email settings function is removed.

Commercial use

--

2

Alarm notification modified to interconnect with SMN

After you enable notifications, you can receive an email if an alarm is triggered or an audit report is generated.

• You can enable or disable alarm notifications on the Alarm Notifications tab of the Settings page.
• You can enable or disable report notifications on the Reports page.

Commercial use

Configuring Alarm Notifications

1

Alarm on log backup failure

If your logs fail to be backed up to OBS, database audit will report an alarm. You can query and handle the alarm monitoring page.

Commercial use

Viewing the Alarms

2

Operation types added to the audit scope

You can audit login and operation behaviors and record the events in audit logs.

Commercial use

Adding Audit Scope

1

CentOS 7.6 (64-bit) supported

The database audit agent can run on CentOS 7.6 (64-bit), helping you locate internal violations and improper operations of the database and protect your data.

Commercial use

Supported OSs

2

New console style

The DBSS console GUI is restyled to be more concise and easy-to-use.

Commercial use

--

1

Oracle 19c supported

Oracle 19c databases can be audited.

Commercial use

Supported Database Types and Versions

2

GBK character set supported

Content using the GBK character set can be audited.

Commercial use

Add a Database and Enable Audit

3

Audit instance status

New statuses of the audit instance are added, including:

• Frozen for legal management
• Frozen due to abuse
• Frozen due to lack of identity verification
• Frozen for partnership

Commercial use

Managing Database Audit Instances

1

Windows OSs supported

The database audit agent can run on Windows OSs, helping you locate internal violations and improper operations of the database and protect your data.

Commercial use

Supported OSs

1

Database protection no longer provided

The database protection service is no longer provided.

Commercial use

--

2

Support for IPv6

You can audit databases using IPv6 addresses.

Commercial use

Add a Database and Enable Audit

3

Database audit

Database audit is deployed in bypass mode. It records user access to the database in real time, generates fine-grained audit reports, sends real-time alarms for risky operations and attack behaviors. In addition, database audit generates compliance reports that meet data security standards (such as Sarbanes-Oxley) to locate internal violations and improper operations, thus ensuring data asset security.

Commercial use

DBSS

1

DBSS

Database Security Service (DBSS) provides functions such as data masking, database audit, sensitive data discovery, database data reduction and injection prevention based on the reverse proxy and machine learning mechanism to protect your databases on the cloud.

Commercial use

DBSS