Oracle Database Security

Copyright © 2013, Oracle and/or its affiliates. All rights reserved.2
Billions of Database Records Breached Globally
97% of Breaches Were Avoidable with Basic Controls
98% records stolen
from databases
84% records breached
using stolen credentials
92% discovered
by third party

Oracle Database Security Solutions
Defense-in-Depth for Maximum Security
Activity Monitoring
Database Firewall
Auditing and Reporting
DETECTIVE
Redaction and Masking
Privileged User Controls
Encryption
PREVENTIVE ADMINISTRATIVE
Sensitive Data Discovery
Configuration Management
Privilege Analysis

 Transparent data encryption
 Prevents access to stored data
 Built-in two-tier key management
 Support for HSM/KMS
 Integration with critical Oracle
Database technologies
Oracle Advanced Security
Encryption is the Foundation
Preventive Control for Oracle Databases
Disk
Backups
Exports
Off-Site
Facilities
Applications

 Replace sensitive app data
 Referential integrity preserved
 Extensible template library
 Automated masking policies
 Support for non-Oracle databases
Oracle Data Masking
Masking Data for Non-Production Use
LAST_NAME SSN SALARY
ANSKEKSL 323—23-1111 60,000
BKJHHEIEDK 252-34-1345 40,000
LAST_NAME SSN SALARY
AGUILAR 203-33-3234 40,000
BENSON 323-22-2943 60,000
Production
Non-Production
Dev
Test
Production

 Limit DBA access to app data
 Multi-factor authorization
 Enforce enterprise data
governance, least privilege
 Realms create protective zones
 Out-of-the-box application policies
Database Vault
Privileged User Controls
Procurement
HR
Finance
select * from finance.customers
Application
DBA
Applications
Security
DBA
DBA

Oracle Label Security
Label Based Access Control
Transactions
Report Data
Reports
Confidential Sensitive
Sensitive
Confidential
Public
 Virtual information partitioning
 Apply labels to users and data
 Flexible classification labels
 Automatically enforced row level
access control
 Transparent to applications

 Monitor database traffic
 Detect, block unauthorized activity
including SQL injection attacks
 Unique SQL grammar analysis
 Whitelists, blacklists enforce activity
 Scalable software appliance
Oracle Audit Vault and
Database Firewall
Database Activity Monitoring and Firewall
Detective Control for Oracle and non-Oracle Databases
Block
Log
Allow
Alert
SubstituteApps
Whitelist Blacklist
SQL
Analysis Policy
Factors
Users

Audit, Report, and Alert in Real-Time
Detective Control for Oracle and non-Oracle Databases
Policies
Built-in
Reports
Alerts
Custom
Reports
!
Security
Analyst
OS &
Storage
Directories
Databases
Oracle
Database
Firewall
Custom
Audit Data &
Event Logs
SOC
DBA
 Secure centralized repository
 Detect, alert suspicious activities
 Out-of-the box custom and
compliance reporting
 Streamline database audits
 Built-in separation of duties
Oracle Audit Vault and
Database Firewall
Auditor

 Scan Oracle for sensitive data
 Built-in, extensible definitions
 Create and maintain application
data models
 Protect data appropriately:
encrypt, redact, mask, audit…
Oracle Enterprise Manager
Discover Sensitive Data and Databases
Administrative Control for Oracle Databases

 Discover and classify databases
 Scan for best practices, standards
 Detect unauthorized changes
 Automated remediation
 Patching and provisioning
Oracle Database Lifecycle Management
Configuration Management
Administrative Control for Oracle Databases
Discover
Scan & Monitor
Patch

 Enterprise ready
 Security and compliance
 Simple and flexible
 Speed and scale
oracle.com/goto/database/security-customers
Oracle Database Security Customers
Customer Benefits
Customers Worldwide Rely on Oracle

For More Information
www.oracle.com/database/security

Oracle Database Security

More Related Content

What's hot (20)

Similar to Oracle Database Security (20)

Recently uploaded (20)

Oracle Database Security