dbsnaps » Security

Oracle Database Vault tutorial – Step By Step

Oded Raz — Sun, 07 Feb 2010 13:02:57 +0000

Oracle Database Vault, part of Oracle’s comprehensive portfolio of database security solutions, helps organizations address regulatory mandates and increase the security of existing applications. Regulations such as Sarbanes-Oxley, Payment Card Industry (PCI) Data Security Standard (DSS), Health Insurance Portability and Accountability Act (HIPAA), Gramm-Leach-Bliley Act (GLBA) and similar global directives call for separation-of-duties and other preventive controls to ensure data integrity and data privacy. With Oracle Database Vault, organizations can pro-actively safeguard application data stored in the Oracle database from being accessed by privileged database users. Application data can be further protected using Oracle Database Vault’s multi-factor policies that control access based on built-in factors such as time of day, IP address, application name, and authentication method, preventing unauthorized ad-hoc access and application by-pass

Pro-actively safeguard application data stored in the Oracle database—Restrict access by unauthorized database users – even privileged users – by using powerful access controls built into the Oracle database.
Address regulatory requirements—Implement separation-of-duty and other real-time preventive controls.
Restrict ad-hoc access to application data— Prevent application-bypass with multi-factor policies that are enforced in the database for high security and performance.
Deploy with confidence—Use certified default policies for Oracle E-Business Suite, Oracle PeopleSoft, and Oracle Siebel CRM applications.

Oracle Single Sign-On (ESSO) Toturial

Oded Raz — Tue, 02 Feb 2010 08:18:34 +0000

Enjoy the benefits of single sign-on to all of your applications, whether you are connected to the corporate network, traveling away from the office, roaming between computers or working at a shared workstation.

Watch this video tutorial and see how you can benefit from Oracle Enterprise Single Sign-On.

Oracle Database Vault – Advanced Factoring tutorial

Oded Raz — Tue, 02 Feb 2010 08:13:25 +0000

Oracle Database Vault helps protect against the insider threat and address regulatory compliance needs. Oracle Database Vault can prevent highly privilegedusers from abusing their power and access highly sensitive data inside your database.

Watch this video and learn how to control access to your database using location and time criteria.

Oracle Database Vault – Secured Application Roles tutorial

Oded Raz — Tue, 02 Feb 2010 08:11:20 +0000

Watch this video and Learn how to integrate grant and revoke databas roles based on pre-defined security roles, using oracle secure appliation roles.

Oracle Transparent Database Encryption tutorial

admin — Sun, 31 Jan 2010 21:45:23 +0000

It’s your organization’s worst nightmare: Someone has stolen backup tapes of your database. Sure, you built a secure system, encrypted the most sensitive assets, and built a firewall around the database servers. But the thief took the easy approach: He took the backup tapes, ostensibly to restore your database on a different server, start the database on it, and then browse the data at his leisure. Protecting the database data from such theft is not just good practice; it’s a requirement for compliance with most laws, regulations, and guidelines. How can you protect your database from this vulnerability?

One solution is to encrypt the sensitive data in the database and store the encryption keys in a separate location; without the keys, any stolen data is worthless. However, you must strike a balance between two contradictory concepts: the convenience by which applications can access encryption keys, and the security required to prevent the key theft. And to comply with company and federal regulations, you need a solution immediately, without any complex coding.

A new feature in Oracle Database 10g Release 2 lets you do just that: You can declare a column as encrypted without writing a single line of code. When users insert the data, the database transparently encrypts it and stores it in the column. Similarly, when users select the column, the database automatically decrypts it. Since all this is done transparently without any change to the application code, the feature has an appropriate name: Transparent Data Encryption (TDE).

Watch the video to see how it works !