I'm looking into Snort to carry our basic intrusion detection, but finding it hard going. What other Intrusion Detection software is there that is good to use for SQL Server?
0
closed as off-topic by tlng05, Stephane, user45139, Xander, schroeder♦ Aug 24 '15 at 14:29
This question appears to be off-topic. The users who voted to close gave this specific reason:
- "Questions seeking product recommendations are off-topic as they become obsolete quickly. Instead, describe your situation and the specific problem you're trying to solve." – tlng05, Stephane, Community, Xander, schroeder
-
Are you looking to protect SQL or the server itself? – schroeder♦ Aug 24 '15 at 14:28
1
You should look not into IDS technologies but Database Activity Monitoring (& Prevention). DAM(P) software shims itself in to watch all SQL queries and results and uses a combination of generic rules and guided knowledge to detect and in some cases prevent inappropriate use.
An IDS will catch SQL injection, which is more specifically aimed at web applications (and impacts databases as an end-state). It generally won't have any rules specific to normal database operations.
answered Aug 24 '15 at 13:18
