Sybase DC35823-01-1500-04 manual Adding auditing, Audit system devices and databases

C H A P T E R 1 0 Adding Optional Functionality to

Adaptive Server

This chapter provides instructions for adding optional functionality to

Adaptive Server:

Topic

Adding auditing

Installing online help for Transact-SQL syntax

Page

113

121

After you have installed the Sybase products on your system, see the product documentation for configuration and administration issues.

Adding auditing

Auditing is an important part of security in a database management system. Security-related system activity is recorded in an audit trail, which can be used to detect penetration of the system and misuse of resources. By examining the audit trail, the System Security Officer can inspect patterns of access to objects in databases and can monitor the activity of specific users. Audit records can be traced to specific users, enabling the audit system to act as a deterrent to users who are attempting to misuse the system.

A System Security Officer manages the audit system and is the only user who can start and stop auditing, set up auditing options, and process audit data.

Audit system devices and databases

The audit system includes several components. The main components are:

•The sybsecurity device and the sybsecurity database, which stores audit information

Configuration Guide 113