This document is the Sybase Database Evaluation Guide written by Shenzhen Dacheng Tianxia Information Technology Co., Ltd. The guide introduces Sybase database's client tools, security mechanisms, checklists, and other tools.
The document outlines how to assess the security of a Sybase ASE installation. It covers client tools such as the command‑line isql utility and the graphical SQL Advantage, explains Sybase's security architecture (DAC, authentication, role separation, network security, and auditing), and provides a detailed checklist for operating‑system, server, login, database, and user‑level settings.
Additional sections describe auxiliary tools (AppDetective, SS Database Scanner, NSGSOFT NGSSQuirreL) that can be used for penetration testing and auditing, and list reference materials for further reading. The guide is intended for DBAs and security auditors who need to verify that Sybase ASE is securely configured. This manual is written in Chinese.
| Default Login Role Recommendation | Set to NULL or low‑privilege user |
|---|
Run the command exec sp_loginconfig "login mode" to display the authentication mode setting.
Use the command exec sp_configure to list all configuration options and their current values.
Visit http://downloads.sybase.com/swd/swx to obtain the latest EBF, ESD, or IR patches.