Oracle 11g Anti-hacker's Cookbook

Table of Contents

• Preface

• Chapter 1: Operating System Security
• Introduction
• Using Tripwire for file integrity checking
• Using immutable files to prevent modifications
• Closing vulnerable network ports and services
• Using network security kernel tunables to protect your system
• Using TCP wrappers to allow and deny remote connections
• Enforcing the use of strong passwords and restricting the use of previous passwords
• Restricting direct login and su access
• Securing SSH login

• Chapter 2: Securing the Network and Data in Transit
• Introduction
• Hijacking an Oracle connection
• Using OAS network encryption for securing data in motion
• Using OAS data integrity for securing data in motion
• Using OAS SSL network encryption for securing data in motion
• Encrypting network communication using IPSEC
• Encrypting network communication with stunnel
• Encrypting network communication using SSH tunneling
• Restricting the fly listener administration using the ADMIN_RESTRICTION_LISTENER parameter
• Securing external program execution (EXTPROC)
• Controlling client connections using the TCP.VALIDNODE_CHECKING listener parameter

• Chapter 3: Securing Data at Rest
• Introduction
• Using block device encryption
• Using filesystem encryption with eCryptfs
• Using DBMS_CRYPTO for column encryption
• Using Transparent Data Encryption for column encryption
• Using TDE for tablespace encryption
• Using encryption with data pump
• Using encryption with RMAN

• Chapter 4: Authentication and User Security
• Introduction
• Performing a security evaluation using Oracle Enterprise Manager
• Using an offline Oracle password cracker
• Using user profiles to enforce password policies
• Using secure application roles
• How to perform authentication using external password stores
• Using SSL authentication

• Chapter 5: Beyond Privileges: Oracle Virtual Private Database
• Introduction
• Using session-based application contexts
• Implementing row-level access policies
• Using Oracle Enterprise Manager for managing VPD
• Implementing column-level access policies
• Implementing VPD grouped policies
• Granting exemptions from VPD policies

• Chapter 6: Beyond Privileges: Oracle Label Security
• Introduction
• Creating and using label components
• Defining and using compartments and groups
• Using label policy privileges
• Using trusted stored units

• Chapter 7: Beyond Privileges: Oracle Database Vault
• Introduction
• Creating and using Oracle Database Vault realms
• Creating and using Oracle Vault command rules
• Creating and using Oracle Database Vault rulesets
• Creating and using Oracle Database Vault factors
• Creating and using Oracle Database Vault reports

• Chapter 8: Tracking and Analysis: Database Auditing
• Introduction
• Determining how and where to generate audit information
• Auditing sessions
• Auditing statements
• Auditing objects
• Auditing privileges
• Implementing fine-grained auditing
• Integrating Oracle audit with SYSLOG
• Auditing sys administrative users

• Appendix: Installing and Configuring Guardium, ODF, and OAV
• You can download the Free Download Chapter from http://www.packtpub.com/sites/default/files/downloads/5269EN_AppendixA_Installing_and_Configuring_Guardium_ODF_and_OAV.pdf

• Index