Applied Oracle Security: Developing Secure Database and Middleware Environments

Name: Applied Oracle Security: Developing Secure Database and Middleware Environments | Developing Secure Database and Middleware Environments
Brand: McGraw-Hill Education
Price: 93.79 EUR
Availability: OnlineOnly

Developing Secure Database and Middleware Environments

Hamza Jahangir Tyler Muth Patrick Sack Richard Wark Bryan Wise David Knox Scott Gaetjen(Autor*in)

McGraw-Hill Education (Verlag)

1. Auflage

Erschienen am 28. September 2009

730 Seiten

E-Book

ePUB mit Adobe-DRM

Systemvoraussetzungen

978-0-07-161371-2 (ISBN)

93,79 €inkl. 7% MwSt.

Systemvoraussetzungen

für ePUB mit Adobe-DRM

E-Book Einzellizenz

Als Download verfügbar

Beschreibung

Weitere Details

Weitere Ausgaben

Inhalt

Cover Page
Applied Oracle Security
Copyright Page
Dedication
About the Authors
Contents
Foreword
Acknowledgments
PART I Oracle Database Security New Features
1 Security Blueprints and New Thinking
About This Book
Background Information
Organization
Database Security Today
Evolving Technologies
Security Motivators
Sensitive Data Categorization
Principles
Modeling Secure Schemas
Schema Profiles
Object Owner Accounts
User Access Accounts
Getting Started
User Profiles
Schema Naming
Security Architecture Checklist
Summary
2 Transparent Data Encryption
Encryption 101
Goal of Encryption
The Basics
Encryption Choices
The Algorithm and the Key
Encrypting Data Stored in the Database
Where the Data "Sleeps"
Protecting the Data
Viewing the Data
Applied Example
Encrypting in the Database
The Transparent Data Encryption Solution
TDE as Part of the Advanced Security Option
TDE Setup: Oracle 10g
The Oracle Wallet
TDE's Key Management
Creating an Encrypted Column in a New Table
Viewing Encrypted Columns
Encrypting an Existing Column
TDE Caveats
Tablespace Encryption: New with Oracle 11g
Oracle 11g Configuration
TDE to Address PCI-DSS
Operational Concerns
Exporting and Importing Encrypted Data
Integration with Hardware Security Modules
Summary
3 Applied Auditing and Audit Vault
An Era of Governance
Auditing for Nonsecurity Reasons
The Audit Data Warehouse
Audit Warehouse Objectives
What to Audit and When to Audit
Guiding Principles
Audit Patterns
Other Audit Action Best Practices
The Audit Warehouse Becomes the Audit Vault
Audit Vault Architecture
Installation Options
Installing Audit Vault Server
Installing Audit Vault Collection Agent
Installation Caveats
Reporting
Alerts
Managing Audit Policy for Source Databases
Audit Maintenance Operations
Summary
PART II Oracle Database Vault
4 Database Vault Introduction
The Security Gap
History of Privileged Accounts
The Security Remedy
Security Should-haves
Database Vault Components
Factors
Rules
Realms
Command Rules
Installing Oracle Database Vault
Installed DBV Administration Roles
Managing Oracle DBV Configuration
Default Separation of Duty
Default Audit Policy
Default Security-relevant DBV Factors
Summary: Database Vault Is Differentiating Security
5 Database Vault Fundamentals
Realms
Realm Protection Patterns
Creating Your First Realm
Realm Components
Command Rules
Command Rule Components
Commands Supported in Command Rules
DBV CONNECT Command Rule
Rule Sets
Rule Set Evaluation Mode
Rule Set Auditing
Custom Event Handlers
Rule Configuration
DBV Rule Set Event Functions
DBV Factors Used in Rule Set Expressions
Factors
Creating Factors
Factor Identities
DBV Factor Integration with OLS
DBV Secure Application Roles
Summary
6 Applied Database Vault for Custom Applications
Notional Database Applications Environment
From Requirements to Security Profile Design
Requirements Technique: Use Cases and Scenarios
Analyzing Requirements: Example Use Case
Identify Coarse-Grained Security Profile
Identify Fine-Grained Security Profile
Identify DBV Factors Based on Business or System Conditions
Centralizing PL/SQL Routines for DBV Factors and Rules
Factors Based on Compliance
Factors Based on Conflict of Interest or Separation of Duty
Factors Based on Organizational Policy
Factors Based on Identity Management
Factors Based on Access Path or Operational Context
Factors Based on Time or Sequential Conditions
Factors Based on Data or Events Stored Externally
Incorporating DBV Factors in Your Application
Identify DBV Realms and Realm Objects Based on Objects
Configure Standard Object-level Auditing for Realm-protected Objects
Configure RLS on Realm-protected Objects
Identify Accounts, Roles, and DBV Realm Authorizations from Use Case Actors
Secure Schemas Under DBV
User Access Accounts
Example Implementation of Secure Schemas with DBV
Post-configuration Account Provisioning
Establish DBV Command Rules from Conditions
Configure System-level Auditing
Establish DBV Secure Application Roles from Conditions
Summary
7 Applied Database Vault for Existing Applications
Audit Capture Preparation
Capturing Audits
Analyzing the Audit Trail
DBV Realms from Object-Owner Accounts
DBV Realm Secured Objects
DBV Realm Authorizations
Identify End User Access Accounts and Roles for DBV SARs
Identifying DBV Command Rules from Conditions
Identifying DBV Factors Based on Business or System Conditions
Refining the DBV Policy Design
Deploying and Validating the DBV Policy
Integrating DBV with Oracle Database Features
Oracle Text
Oracle Spatial
Expression Filters
Oracle Streams Advanced Queuing
Transparent Data Encryption
Oracle Recovery Manager
Gathering Statistics on Realm-protected Schemas
EXPLAIN PLAN on Realm-protected Schemas
Advanced Monitoring and Alerting with a DBV Database
Monitoring and Alerting on DBV with OEM GC
Extending the DBV Rule Set Custom Event Handler
Summary
PART III Identity Management
8 Architecting Identity Management
Understanding the Problem with Identity Management
Central Issuance Authority
Identity Verification
Identity Propagation
Architecting Identity Management
Identity Management Discovery
Identity Management Patterns
Oracle Identity Management Solutions
User Provisioning
Directory Management
Authentication Management
Authorization Management
Role Mining and Management
Summary
9 Oracle Identity Manager
The User Provisioning Challenge
Oracle Identity Manager Overview
User
User Group
Organization
Access Policy
Resource Object
IT Resource
User Provisioning Processes
Discretionary Account Provisioning
Self-Service Provisioning
Workflow-based Provisioning
Access Policy-driven Provisioning
User Provisioning Integrations
Prebuilt Connectors
Generic Technology Connector
Reconciliation Integrations
Compliance Solutions
Attestation
Access Reporting
OIM Deployment
Summary
10 Oracle Directory Services
Identity Management and the LDAP Directory
Oracle Internet Directory
OID Architecture
OID Synchronizations
Directory Virtualization and Oracle Virtual Directory
OVD 101
OVD Architecture
OVD Applied
OVD Installation
Creating a New OVD Server
Initializing the Virtual LDAP Tree Using a Local Store Adapter
Integrating OVD with an Active Directory LDAP Server
Integrating OVD with an Oracle Database
Joining Information in OVD
Summary
PART IV Applied Security for Oracle APEX and Oracle Business Intelligence
11 Web-centric Security in APEX
Introduction to the APEX Environment
Components and Configurations
Architecture
APEX and Database Roles
APEX Sessions
Securing an APEX Instance
APEX Security Settings
Securing the Application Server Tier
Prevent Web-based Attacks with mod_security
SSL/TLS Techniques
Protecting the APEX Database Schemas
Database Vault and APEX
Summary
12 Secure Coding Practices in APEX
Authentication and Authorization
Authentication Schemes
Custom Table of Usernames and Passwords
Authorization Schemes
SQL Injection
Example 1: The Wrong Way
Example 2: The Right Way
Cross-site Scripting
URL Tampering
Leveraging Database Security Features
Virtual Private Database
Fine-grained Auditing
Summary
13 Securing Access to Oracle BI
The Challenge in Securing BI
System Users
Security in the Warehouse vs. the Transactional System
What Needs To Be Secured
Mechanics of Accessing Data with Oracle BI
Architecture
Connection Pools
Variables
Authentication and Authorization
Authentication Options
Authorization
Single Sign-On
SSO Options
SSO Setup Cautions
SSO Using Oracle Access Manager
Deploying in a Secure Environment
SSL Everywhere
Encrypted Outward Connections
Securing the BI Cache
Public-facing Applications
Firewalls and DMZs
Public User
Summary
14 Securing Oracle BI Content and Data
Securing Web Catalog Content
Web Catalog Groups
Folder-based Security
iBot Security
Securing BI Publisher Catalog Content
Conveying Identity to the Database
Setting Client Identifiers
Securing Data Presented by Oracle BI
Security Policies Within the BI Server
Integrating Oracle BI with Database Security Policies
Deciding When to Use VPD or Oracle BI Row-level Security
Oracle BI and Database Vault
Factors and Oracle BI
Realms and Oracle BI
Auditing
Usage Tracking
Database Auditing
Combining Usage Tracking and Database Auditing
BI Features with Security Implications
Default Privileges
Act as Proxy
Direct Database Requests
Advanced Tab
Direct Access to the BI Server
Web Services Access
Summary
A Using the Oracle BI Examples
Users and Groups
Database Preparations
Database Auditing
Database Scripts
Oracle BI Setup
Credential Store
BI Publisher Superuser
Other BI Publisher Configuration Steps
Sample BI Publisher Report
Scheduler Configuration
Usage Tracking
Recommend Testing
Oracle BI Tests
BI Publisher Tests
Oracle Delivers Tests
Sample Web Catalog Description
SH Dashboard
Utilities Dashboard
Other Dashboards
Sample RPD Descriptions
Common to All RPDs
Internal Authentication
Internal Authentication with Act as Proxy Enabled
Column-based Security
Table-based Authentication
Database Authentication
LDAP Authentication
SSO Integration
Summary
Index

Systemvoraussetzungen

Als PDF speichern Als Link merken