Oracle Database Audit & Security Course

Topics covered on the 3 day Oracle Database Audit & Security course

INTRODUCTION TO AUDIT & SECURITY

AUDIT & SECURITY

• Security
• Audit
• Checklist-Based Auditing
• Risk-Based Auditing
• Audit Plan
• DISA Database STIG
• NIST

THE BIG PICTURE

• Access Control
• Intrusion Prevention
• Intrusion Detection
• Secure Data Storage
• Secure Data Access

INTRODUCTION TO ORACLE

WHAT IS ORACLE?

• Security Considerations
• Audit Considerations

ORACLE BASIC ARCHITECTURE

THE PHYSICAL DATABASE

• The Parameter File
• The Control File
• The Password File
• The Network Configuration Files
• The listener.ora File
• The tnsnames.ora File
• The sqlnet.ora File

THE INSTANCE

• Licensing
• Oracle Services
• The Listener Service
• The File System Locations
• The Registry Keys
• Environment Variables
• Restricting Access to an Oracle Database
• Client Connectivity
• The tnsnames.ora File
• The Listener Service
• The listener.ora File
• The sqlnet.ora File
• Listener Security
• Setup Valid Node Checking
• Encrypting Connections to Oracle
• Secure Sockets Layer
• Hardware Security Modules (HSM)
• Internet Protocol Security (IPSec)
• Instance & Database Metadata
• Dynamic Views
• PFILE

THE LOGICAL DATABASE ARCHITECTURE

• Database Objects
• Ownership
• Schemas
• Oracle Language Settings

THE MANAGEMENT TOOLS

• Enterprise Manager
• sqlplus
• sqlldr
• exp & imp
• rman
• expdp & impdp

ORACLE LOGS

• The Alert Log
• Trace Files
• User Session Tracing

ORACLE SECURITY COMPLIANCE

ORACLE CONFIGURATION

• Enterprise Manager
• Sqlplus
• Oracle Network Manager
• Database Configuration Assistant
• Instance Wide Security Settings
• Initialization Parameters

STORAGE MANAGEMENT

• Configuration .ora Files
• Alert Log & Trace Files
• ORACLE_HOME Directory
• Admin Directory
• The diag directory
• Data Files
• Tablespaces
• The Redo Logs
• Storage Fault Tolerance
• Archive Destinations
• Backup Images
• Importing And Exporting Data
• sqlplus
• sqlldr
• Imp & exp
• expdp & impdp
• Back Ups and Restores
• Redo Log Architecture
• Controlfile Backup
• Recovery manager (RMAN)
• Security Consideration for Backup & Restore

USER SECURITY

• Schemas
• Default User Accounts
• The SYS User
• The SYSTEM User
• The SYSOPER Role
• The SYSDBA Role
• Connecting as SYSDBA or SYSOPER
• Operating System Authentication
• Oracle Password Authentication
• Granting SYSOPER and SYSDBA privileges to Other Users
• Creating User Accounts
• Global Authentication
• N-Tier Authentication
• Proxy Authentication
• Database Roles
• Oracle System Privileges
• Statement Privileges
• GRANT & REVOKE Statements

PROFILES

• Password Complexity Function
• Changing Passwords
• Sample UTLPWDMG.SQL Script

VIRTUAL PRIVATE DATABASE

• DBMS_RLS Procedures
• Restricting Access Through SQL
• The SYS_CONTEXT Function
• Restricting Access Through Fine Grained Access Control

ORACLE LABEL SECURITY

• Oracle Label Security Policies
• Data Labels
• User Labels
• Security Clearance Components
• User Privileges
• Enforcement Options
• Default Row Level

ORACLE ENCRYPTION

• Oracle Internet Directory
• Information Security
• Transparent Data Encryption
• Backing Up Encryption Keys & Wallets
• Tablespace Encryption

HARDWARE SECURITY MODULES (HSM)

• Implementing Hardware Security Modules

ENCRYPTION PACKAGES

• DBMS_OBFUSCATION_TOOLKIT
• DBMS_CRYPTO

ORACLE SECURITY PRODUCTS AND FEATURES

HIGH AVAILABILITY

APPLICATION DEVELOPMENT

• Stored Program Privileges
• Sql Injection

ORACLE AUDITING

• Data Dictionary Views
• The Audit Statement
• The Audit Data Dictionary Views
• DML Triggers
• Event Triggers
• Fine Grained Auditing
• Other Auditing Techniques

THREATS & VULNERABILITIES

• Process Threats And Vulnerabilities
• Platform Threats And Vulnerabilities
• Authentication Threats And Vulnerabilities
• Programming Threats And Vulnerabilities
• Data Access Threats And Vulnerabilities