Oracle delivers secure infrastructure through a wide range of products, processes, and technologies to help prevent unauthorized access to confidential information, reduce the cost of managing users, and facilitate privacy management.
Oracle Database Vault helps organizations increase the security of existing applications and address regulatory mandates that call for separation-of-duties, least privilege and other preventive controls to ensure data integrity and data privacy. Oracle Database Vault proactively protects application data stored in the Oracle database from being accessed by privileged database users.
Oracle Audit Vault provides a secure and scalable solution for consolidating audit data generated by Oracle, Microsoft SQL Server, IBM DB2 and Sybase ASE. Built-in reporting and alerting help enterprises more easily comply with both regulatory and internal reporting requirements. Oracle Audit Vault automates the audit consolidation process, turning audit data into an important security and compliance resource.
Native audit data provides a complete view of database activity along with full execution context irrespective of whether the statement was executed directly, through dynamic SQL, or through stored procedures. In addition to consolidating audit data from databases, operating systems, and directories, the Audit Collection Plugin can be used to collect audit data from application tables or XML files, and transfer them to the Audit Vault Server. Audit data from databases is automatically purged after it has been moved to the Audit Vault Server. Audit Vault Server supports data retention policies spanning days, weeks, or years on a per source basis, making it possible to meet internal or external compliance requirements.
Oracle Database Firewall is an active, real-time database firewall solution that provides white list, black list and exception list policies, intelligent and accurate alerts, and monitoring with very low management and administrative costs. Oracle Database Firewall is independent of the database configuration and operation. This independent boundary of protective shielding helps reduce the risk of data loss and helps organizations manage an ever changing landscape of regulations.
Unlike traditional SQL firewalls that relied on identifying out-of-policy SQL using strategies such as regular expressions, string matching, and schema comparison, Oracle Database Firewall delivers intelligent database firewall security, enabling policies to be set and adapted quickly and accurately. Organizations can choose to deploy Oracle Database Firewall in blocking mode as a database policy enforcement system to protect their database assets, or to just monitor database activity for supplemental auditing and compliance purposes.
Oracle Database Firewall monitors data access, enforces access policies, highlights anomalies and helps protect against network based attacks originating from outside or inside the organization. Attacks based on SQL injection can be blocked by comparing SQL against the approved white list of application SQL. Oracle Database Firewall is unique and offers organizations a first line of defense, protecting databases from threats and helping meet regulatory compliance requirement.
Oracle Audit Vault and Database Firewall (AVDF) secures databases and other critical components of IT infrastructure (such as operating systems) in two ways:
Oracle Advanced Security transparent data encryption (TDE) provides the industry’s most advanced database encryption solution. TDE automatically encrypts data written to storage by the Oracle database and automatically decrypts the data after the requesting user or application has authenticated to the Oracle database and passed all access control checks including those enforced by Database Vault, Label Security and virtual private database. Database backups retain the data as encrypted, providing protection for backup media. Data exported into flat files from the Oracle Database can be encrypted as well. Both logical and physical standby databases can be configured with TDE to provide complete protection for sensitive data in high availability architectures. Advanced Security network encryption provides both SSL based and native network encryption capabilities to protect data in transit. Advanced Security strong authentication services support PKI, Kerberos and RADIUS for an alternative to existing password-based authentication.
Oracle Label Security was introduced in Oracle8i to provide multi-level security capabilities within the Oracle Database for government and defense organizations. Since then, the use of label based access control technology has expanded to commercial organizations addressing privacy and regulatory compliance requirements. Oracle Label Security has the ability to:
In addition, Oracle Label Security user authorizations such as “Sensitive:PII” can be used:
For government and defense applications Oracle Label Security provides multi-level security (MLS) capabilities to protect classified information. Please refer to the Label Security best practices paper for more information on Oracle Label Security MLS capabilities.
Oracle Data Masking pack for Enterprise Manager helps organizations comply with data privacy and protection mandates that restrict the use of actual customer data. With Oracle Data Masking, sensitive information such as credit card or social security numbers can be replaced with realistic values, allowing production data to be safely used for development, testing, or sharing with out-source or off-shore partners for other non-production purposes.
Oracle Secure Backup consists of two offerings; both are integrated with Oracle Recovery Manager (RMAN). Oracle Secure Backup, centralized tape backup management, provides high performance and heterogeneous data protection in distributed UNIX, Linux, Windows, and Network Attached Storage (NAS) environments. Oracle Secure Backup Cloud Module provides an integrated Oracle Database backup to Amazon S3 cloud (Internet) storage.
Exatek is an IT Solutions Firm specialized in providing Professional Services and Integrated Solutions in the Oracle Technology, Oracle BI & EPM, and Red Hat Linux.
