[logs] Re: on database logging

Previous message: Tom Le: "[logs] Re: on database logging"
In reply to: Tom Le: "[logs] Re: on database logging"
Next in thread: Tom Le: "[logs] Re: on database logging"
Reply: Tom Le: "[logs] Re: on database logging"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

anton@private

> > What's the story? Is database logging hot or not? :-)
>
> Hot, it is not.  Necessary, yes for companies with compliance drivers.
> The reason it is not hot is because it is solely driven by compliance and
> not by any other company requirements.

Ouch, how about security? I guess we are dealing with some case of
mental inertia here. Otherwise, why is it not obvious that for
incident response due to system hacking you look at system logs, and
for incident response due to database or web application hacking you
look ... where DO you look if you don't have the database logs?

So, somebody need to campaign "Database logging: it just isn't only
for auditors anymore" :-)

Best,
-- 
Anton Chuvakin, Ph.D., GCIA, GCIH, GCFA
      http://www.chuvakin.org
  http://chuvakin.blogspot.com
    http://www.info-secure.org
_______________________________________________
LogAnalysis mailing list
LogAnalysis@private
http://lists.shmoo.com/mailman/listinfo/loganalysis