The XACML and Fine-Grained Authorization Leader
Product Overview
Given the persistent threat of hacking and fraud from both internal and external sources, data security in today’s business environment is not an option. The landslide of security and privacy regulations (Sarbanes-Oxley, HIPAA, PCI, PIPEDA, the Patriot Act, etc.) all dictate the need to control which users are able to access what data. Row and column level security is a requirement and SQL Server does not provide the native capabilities to enable it.
DB-Wall is a SQL Server proxy that clients communicate with, rather than communicating with the database server directly. It protects SQL Server data in conjunction with Keystone – BiTKOO’s authentication and authorization engine, which is a mature and proven technology that significantly reduces the need to utilize custom code for authentication and fine-grained authorization. DB-Wall extends the Keystone model to the database by handling row and column level security. The DB-Wall engine uses Keystone metadata and a sophisticated query engine to intercept SQL calls from clients such as ODBC, JDBC or native SQL Client and to modify inbound requests in such a way that only authorized data is returned to the caller.
The DB-Wall database proxy provides centralized control and audit of user access to SQL Server data and ensures only the appropriate data is accessible to the user. The solution utilizes defined roles integrated with BiTKOO Keystone’s authentication and authorization functions, plus dynamic variables derived from directory information.