strongDM<\/a> CEO Elizabeth Zalman says.<\/p>\nSo there needs to be a way to make sure all of that stays secure, and only the right people have access to the right information and can manipulate it. That\u2019s where strongDM, a tool for managing permissions and access for databases, comes in. strongDM ensures that information remains silo\u2019d in ways to keep one person from accessing all of the available information \u2014 and opening up the possibility of leaking all that information out into the public.<\/p>\n
\u201cIf you think about it, it\u2019s not just one file that contains a list of customer email addresses, we\u2019re talking about a breach of your database,\u201d Zalman said. \u201cThat contains the crown jewels of your business. Right now it\u2019s super hard to figure out who has access to what, and there\u2019s no easy way to revoke access when an employee\u00a0leaves. And once someone is in the database, it\u2019s nearly impossible\u00a0to figure out what they\u2019re doing.\u201d<\/p>\n
All of this is important to prevent internal leaks, such as one part of a company getting access to too much of the internal data and opening up the possibility of all of it being stolen in a simple hack like a phishing scheme. Zalman said that while the company started off as one with broader analytics tools, it became clear that the companies they were working with wanted to prevent leaks above everything else.<\/p>\n
Companies with strongDM can also very closely track changes that are happening \u2014 such as who is making queries or changes \u2014 in order to ensure that the right people have access to the right information.<\/p>\n
Each individual database technology may also have different monitoring tools, making the whole process of figuring out who has access to what difficult \u2014 as well as revoking those permissions. As they look to expand, strongDM has raised an additional $3 million in financing from True Ventures, with existing investors\u00a0Bloomberg Beta, Laconia Capital Group, Social Starts, and Jerry Neumann and some of its clients.<\/p>\nThe actual workflow doesn\u2019t change all that much, Zalman said. Users will go into strongDM in order to make their queries or changes, and they\u2019ll still be able to get the same information. If they try to overstep their boundaries \u2014 such as a marketing team trying to update or drop a table \u2014 then they\u2019ll get an error thrown at them that they don\u2019t have permission to do that.<\/p>\n
And of course, there\u2019s always the risk that when someone leaves a company, they\u2019ll bolt with all the data they can get. Instead of ensuring that companies are securing that information internally and ensuring it doesn\u2019t get on the wrong hands, they are focused on preventing outside hacks, Zalman said.<\/p>\n
\u201cThink about it this way, you\u2019re a marketing person and you\u2019re leaving for a competitor, you could just log in and download all that, and you would have\u00a0no idea that someone did that,\u201d Zalman said. \u201cIn the database\u00a0case, you would have\u00a0just given someone access to your crown jewels. The reason so many people haven\u2019t been talking about this is so much is focusing on the perimeter.\u201d<\/p>\n
Another benefit of deploying a technology like strongDM is that they can ensure that engineers \u2014 especially ones with large salaries \u2014 can spend their time more effectively instead of having to manage database access for a company\u2019s employees. For Zalman and strongDM, the big job will be to ensure that it makes it easy to manage all that information and protect it before the larger providers figure out a way to unify that kind of monitoring and provisioning.<\/p>\n
\u201cUnless you have a seven-figure security budget and dedicated staff, we are the only option to define and monitor access to any database in a single place,\u201d Zalman said. \u201cOtherwise admins are forced to cobble together open source options on their own to cover creation, management, and monitoring.\u00a0 Credential creation would be managed through scripts [like Chef or Puppet], management would ad-hoc with no record of changes, and monitoring requires database-specific plugins that are hard to install and costly to performance. And then you need to patch all of that together.\u201d<\/p>\n
<\/p>\n
Article source: http:\/\/feedproxy.google.com\/~r\/techcrunchIt\/~3\/raIjDwQlDCs\/<\/p>","protected":false},"excerpt":{"rendered":"
When companies are looking to secure the information they have in their databases, it\u2019s a pretty big challenge no matter how you slice it. Unless you have a large security <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[19],"tags":[25],"class_list":["post-2021","post","type-post","status-publish","format-standard","hentry","category-enterprise-software","tag-enterprise"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t
![](\"https:\/\/i0.wp.com\/www.rsoftsolution.com\/blog\/wp-content\/plugins\/RSSPoster_PRO\/cache\/63ced_strongdm-screenshot-in-laptop.png?w=640\")
<\/p>\n