Virtual Patching and Overlays

News of an interesting startup that delivers and implements patches to database systems by creating an overlay or container which is capable of monitoring traffic into/out of the DBMS, and implementing the appropriate transformation or modification to the behavior of the system.  In principle, this is very much like what BlueLane has done with soft appliances (known as shields) which provide virtual patching for operating systems and selected application platforms.

This elegant architecture is brought to us by virtualization and the ability to deliver optimized soft appliances. I like the aesthetic.

Making a case for virtual patching | InfoWorld | News | 2007-08-20 | By Matt Hines

Dubbed Sentrigo and launched in Nov. 2006, the Israeli firm contends that by adding a layer of host-based activity monitoring and intrusion protection technology on top of almost any commercial database, it can beat back attempts to take advantage of both known vulnerabilities and so-called zero day flaws in the systems.

Rather than struggling to deploy the latest patch from Oracle, IBM, or any other database vendor quickly -- and potentially throwing business-critical systems offline in the process -- Sentrigo executives say that the virtual patching functionality built into its Hedgehog Enterprise package allows companies to stay protected while assessing their options.

While the company is only in the process of signing up its initial customers, its leaders maintain that the firm can quickly become a major player in the database security market simply through the addition of virtual patching to other more traditional tools.

Because the technology sits on top of the database itself and becomes conditioned to the type of activity such a system experiences on a daily basis, the product can easily spot any suspicious commands and block attacks in real time, Sentrigo officials said.

Technorati Tags: BlueLane, soft appliance, Sentrigo