Tracking and Analysis: Database Auditing | Oracle 11g Anti-hacker's Cookbook

Sign In Start Free Trial

Book Overview & Buying
Table Of Contents

Oracle 11g Anti-hacker's Cookbook

By : Adrian Neagu

5 (5)

Oracle 11g Anti-hacker's Cookbook

5 (5)

By: Adrian Neagu

Overview of this book

For almost all organizations, data security is a matter of prestige and credibility. The Oracle Database is one of the most rich in features and probably the most used Database in a variety of industries where security is essential. To ensure security of data both in transit and on the disk, Oracle has implemented the security technologies to achieve a reliable and solid system. In Oracle 11g Anti-Hacker's Cookbook, you will learn about the most important solutions that can be used for better database security."Oracle 11g Anti-hacker's Cookbook" covers all the important security measures and includes various tips and tricks to protect your Oracle Database."Oracle 11g Anti-hacker's Cookbook" uses real-world scenarios to show you how to secure the Oracle Database server from different perspectives and against different attack scenarios. Almost every chapter has a possible threads section, which describes the major dangers that can be confronted. The initial chapters cover how to defend the operating system, the network, the data and the users. The defense scenarios are linked and designed to prevent these attacks. The later chapters cover Oracle Vault, Oracle VPD, Oracle Labels, and Oracle Audit. Finally, in the Appendices, the book demonstrates how to perform a security assessment against the operating system and the database, and how to use a DAM tool for monitoring.

Oracle 11g Anti-hacker's Cookbook

Oracle 11g Anti-hacker's Cookbook

Credits

Credits

Foreword

Foreword

About the Author

About the Author

About the Reviewers

About the Reviewers

www.PacktPub.com

www.PacktPub.com

Preface

Preface

Free Chapter

Operating System Security

Operating System Security

Introduction

Using Tripwire for file integrity checking

Using immutable files to prevent modifications

Closing vulnerable network ports and services

Using network security kernel tunables to protect your system

Using TCP wrappers to allow and deny remote connections

Enforcing the use of strong passwords and restricting the use of previous passwords

Restricting direct login and su access

Securing SSH login

Securing the Network and Data in Transit

Securing the Network and Data in Transit

Introduction

Hijacking an Oracle connection

Using OAS network encryption for securing data in motion

Using OAS data integrity for securing data in motion

Using OAS SSL network encryption for securing data in motion

Encrypting network communication using IPSEC

Encrypting network communication with stunnel

Encrypting network communication using SSH tunneling

Restricting the fly listener administration using the ADMIN_RESTRICTION_LISTENER parameter

Securing external program execution (EXTPROC)

Controlling client connections using the TCP.VALIDNODE_CHECKING listener parameter

Securing Data at Rest

Securing Data at Rest

Introduction

Using block device encryption

Using filesystem encryption with eCryptfs

Using DBMS_CRYPTO for column encryption

Using Transparent Data Encryption for column encryption

Using TDE for tablespace encryption

Using encryption with data pump

Using encryption with RMAN

Authentication and User Security

Authentication and User Security

Introduction

Performing a security evaluation using Oracle Enterprise Manager

Using an offline Oracle password cracker

Using user profiles to enforce password policies

Using secure application roles

How to perform authentication using external password stores

Using SSL authentication

Beyond Privileges: Oracle Virtual Private Database

Beyond Privileges: Oracle Virtual Private Database

Introduction

Using session-based application contexts

Implementing row-level access policies

Using Oracle Enterprise Manager for managing VPD

Implementing column-level access policies

Implementing VPD grouped policies

Granting exemptions from VPD policies

Beyond Privileges: Oracle Label Security

Beyond Privileges: Oracle Label Security

Introduction

Creating and using label components

Defining and using compartments and groups

Using label policy privileges

Using trusted stored units

Beyond Privileges: Oracle Database Vault

Beyond Privileges: Oracle Database Vault

Introduction

Creating and using Oracle Database Vault realms

Creating and using Oracle Vault command rules

Creating and using Oracle Database Vault rulesets

Creating and using Oracle Database Vault factors

Creating and using Oracle Database Vault reports

Tracking and Analysis: Database Auditing

Tracking and Analysis: Database Auditing

Introduction

Determining how and where to generate audit information

Auditing sessions

Auditing statements

Auditing objects

Auditing privileges

Implementing fine-grained auditing

Integrating Oracle audit with SYSLOG

Auditing sys administrative users

Index

Index

Auditing sys administrative users

By using standard auditing, operations performed against database objects by sys or users with sysdba and sysoper privileges are not audited. Only details about logon including the terminal and the date are audited by mandatory auditing. This recipe will show you how to enable the audit for sys users.

Getting ready

All steps will be performed on the HACKDB database.

How to do it...

In a separate terminal open /var/log/oracle_audit.log with the tail –f command. From a second terminal connect as sysdba and issue a count against the hr.employees table:
```
SQL> conn / as sysdba  
Connected.
SQL> select count(*) from hr.employees;
  COUNT(*)
----------
       107
```
If you now look at /var/opt/oracle_audit.log you will see that nothing was recorded.

Connect as sysdba and modify audit_sys_operation to true as follows:

SQL> alter system  set audit_sys_operations=true scope=spfile;

Bounce the database.
Connect as sysdba and reissue the count against hr.employees:
```
SQL...
```

CONTINUE READING

83

Tech Concepts

36

Programming languages

73

Tech Tools

Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.

Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.

50+ new titles added per month and exclusive early access to books as they are being written.

Oracle 11g Anti-hacker's Cookbook

Search

Your notes and bookmarks