Sitting Target - Database security goes to the top of the list

When it comes to storing data and acting as a repository for information, database systems don't phase out very quickly.

Companies are finally paying more attention to the security infrastructure surrounding their databases, and for security vendors and solution providers, this is creating a tidy, predictable revenue stream.

Given the large amount of legacy databases out there in the corporate IT netherworld that need securing, this trend looks likely to continue for some time.

"There's an enormous movement under way for securing databases in light of regulatory requirements," said Gretchen Hellman, vice president of marketing and product management at Vormetric, a US-based database security vendor.

"Database security is particularly problematic for older, legacy systems that were not designed with security mechanisms," said Andrew Plato, president of Anitian Enterprise Security, US-based security solution provider. "Newer products have a lot of built-in security mechanisms that do not require special third-party adapters and such. But older Oracle or mainframe systems often require complex middleware to manage security controls and/or encryption."

The good news for VARs is that when it comes to storing data and acting as a repository for information, database systems don't phase out very quickly. In the enterprise, a system could be 25 years old and still be perfectly functional, according to solution providers.

Ed Moyle, analyst and co-founder of SecurityCurve said there are plenty of opportunities for solution providers to add encryption to legacy database platforms.

"Vendors are building security into their new products in response to customer demand, which is a logical step," said Moyle. "But for folks that bring that to legacy platforms, encryption is a big trend."