Garda DBF

The main articles are:

• Security Information and Event Management (SIEM)
• DLP - Data Loss/Leak Prevention

The Garda DBF system is designed to ensure security DBMS and independent audit of operations with databases and business applications. It continuously monitors resource calls and detects suspicious operations in real time.

2024

"Garda DBF" 5.2 with support for "Moc.OC"

"Garda DBF" will help protect the personal data of students of Moscow schools by supporting the operating system MOS OS. The updated version of the system optimizes the use of administrator resources, it improves the tools for managing licensed traffic - now customers can predict the additional costs of its processing and eliminate redundant ones. Better identify potential threats by analyzing important events in the database. The developer announced this on September 11, 2024.

The use of automated technologies in various social spheres makes children's privacy more vulnerable and creates risks of illegal trafficking in their personal data, "said Dmitry Larin, head of the Garda DBF product. - Now our system will strengthen the protection of data in the DBMS of educational institutions from leaks and cyber attacks.

"Garda DBF" 5.2 allows you to control the volume of analyzed traffic by improving the calculation of traffic for licenses. This helps prevent limits from being exceeded. This way customers can avoid system disruption or unplanned costs. Upgrading the system allows administrators to see which processes or users generate the most traffic and, if necessary, optimize their operation for more efficient use of licensed resources.

When installing this version of Garda DBF through the agent, the system analyzes more events in the database by adding backup analyzers. In addition, when the agent is restarted, the updated version saves the logging parameters. This avoids missing events or changes that could occur during a reboot, ensuring the integrity and continuity of the event log. The system administrator does not need to reconfigure the logging settings every time the agent reboots. This simplifies system management and reduces the possibility of configuration errors.

We've made it easier to install an agent in a Docker image, given the growing demand for solutions in virtual environments. This allows you to quickly and easily deploy database protection in containers, providing flexibility, scalability, and compatibility with today's cloud infrastructures. Dmitry Larin said.

Adaptation for "OS Alt" release 10

The Garda Group of Companies presented an improved version of Garda DBF on March 27, 2024. Updates accelerate incident response, increase control over privileged users, and increase database protection in domestic operating systems.

The updated version of Garda DBF helps solve import substitution problems in information security. The system is adapted for installation on servers running release 10 of Alt SP.

Security updates databases increase the effectiveness of sensitive access control - information Improved monitoring of privileged users. The option is implemented by implementing the function of controlling changes in configuration files on the OS. Linux

"Garda DBF" allows for shorter response times to incidents. The system implements the export of data to SIEM (Security Information and Event Management *) in real time, log records can be sent at the time of their registration, and not on a schedule. To reduce the load on the solution, the new settings in the scan templates are the scan depth and the number of values stored.

This version has expanded the list of supported systems by adding support for ElasticSearch (a system for full-text search and big data processing).

When developing the new release of Garda DBF, we focused on full support for version 10 of Alt SP in order to further meet the current customer requirements. Local interception control features have improved: Syslog has been added to existing protocols, which allows you to intercept Hadoop audit events. It also became possible to turn on the mode of active database protection on Windows OS, - said Dmitry Larin, head of the product department for database protection of the Garda group of companies.

2023

Arenadata DB DBMS Compatibility

The Russian vendor Arenadata and the developer of information security systems, the Garda group of companies, as a result of test tests, confirmed the compatibility of the Arenadata DB analytical MPP DBMS (ADB) and the Garda DBF DBMS security complex. Arenadata announced this on November 8, 2023. Read more here.

Purpose of the "Garda DBF" system

The use of the Garda DBF system allows you to avoid information leakage, detect and prevent attempts at external intrusion, control remote access of personnel and the actions of privileged users. In addition, the system blocks unwanted requests to databases and web applications, detects all databases in the company, classifies them and scans them for vulnerabilities.

With the help of Garda DBF, you can prevent the upload and sale of critical, including personal and financial, client data, quickly respond to corporate fraud attempts, distinguish access to DBMS for certification of information systems, and find suboptimally configured DBMS configurations.

The system is included in the register of domestic software, certified by the FSTEC of Russia in class NDV-4 (according to information as of November 2023).