Curriculum
- 1 Section
- 8 Lessons
- 3 Days
Expand all sectionsCollapse all sections
- Topics8
- 1.1ABOUT DATABASE SECURITY DATA security & potential threats DATABASE security checklist SECURING the database installation SECURE by default configuration
- 1.2ENCRYPTION CONCEPTS ABOUT encryption ABOUT SSL CHALLENGES with asymmetric encryption WHAT is PKI? A certificate challenge scenario WHAT is a wallet? PUBLIC-key cryptography standards NETWORK encryption STORAGE encryption FILE encryption ENCRYPTION limitations ABOUT advanced technology ACCESS control PROTECTION against a malicious insider ENCRYPTION algorithms & potential weaknesses DATA encryption algorithm developments CHOOSING a data encryption algorithm MESSAGE integrity algorithms CHOOSING an integrity algorithm MANAGING encryption keys KEY storage strategies
- 1.3APPLYING TRANSPARENT DATA ENCRYPTION TRANSPARENT data encryption TDE encryption algorithms ABOUT column encryption MAC & the integrity algorithm IS TDE unbreakable? NETWORK security MANAGING TDE ENCRYPTION security module CHARGING the default encryption security mode USING hardware security modules WALLET open options CREATE wallet OPEN & closed wallet ADVANCED options RE-KEY master encryption key MIGRATE to HSM CHANGE encryption security module settings CHANGE encryption wallet password IMPLEMENTING tablespace encryption SQL create tablespace with encryption QUERYING the data dictionary CHANGING the encryption state IMPLEMENTING column encryption SPECIFYING column encryption ENCRYPTION algorithms USING the EM interface LIMITATIONS to column encryption PERFORMANCE considerations
- 1.4APPLYING FILE & LOB ENCRYPTION SECUREFILE LOBS APPLICATION encryption to LOBs EXAMINING securefile encryption using pl/sql EXAMINING securefile encryption using EM ETXTERNAL table encryption DATA pump encryption ENCRYPTION parameter ENCRYPTION_ALGORITHM parameter ENCRYPTION_MODE parameter ENCRYPTION_PASSWORD parameter ENCRYPTION scenario RMAN backup set encryption BACKUP encryption using EM BACKUP encryption using RMAN Decrypt during recovery ORACLE secure backup
- 1.5ORACLE NET SERVICES & SECURE COMMUNICATION ORACLE net within the application architecture COMPONENTS within the oracle net COUNTERING database attacks LIMITING databse attacks PREVENTING denial¬-service-attacks WHAT is a denial-of service attack? PREVENTING attacks against the database AVOIDING disclosure of vulnerabilities HIDING the database banner ORACLE net services user notifications ORACLE net native encryption SECURE communications ENCRYPTION & integrity negotiations NEGOTIATION security IMPLEMENTATION with oracle net manager INTEGRITY rules ENCRYPTION rules IMPLEMENTATION with sqlnet.ora ADVANCED security settings
- 1.6APPLICATION-BASED ENCRYPTION ALGORITHMIC adaptations STREAM vs. block ciphers CIPHER block modification ELECTRONIC code book (ECB) CIPHER block chaining (CBC) CIPHER feedback (CFB) OUTPUT feedback mode (OFB) CIPHER block padding PKCS #5 ABOUT DBMS_CRYPTO() WORKING with encryption data BASIC DBMS_CRYPTO() capabilities KEY generation ENCRYPTION & decryption SPECIFYING the encryption rules ALGORITHM specification BLOCK cipher chaining modifier specification BLOCK cipher padding modifier specification MESSAGE integrity capabilities HASH() MAC() A simple key management approach DATABASE storage APPLICATION logic storage
- 1.7PROTECTING AGAINST SQL INJECTION ATTACKS UNDERSTANDING the threat HOW is the threat used? STATEMENT modification BYPASSING authentication STATEMENT insertion APPLYING countermeasures USE bind variables USE DMBS_ASSERT()
- 1.8IMPLEMENTING VIRTUAL PRIVATE DATABASES UNDERSTANDING VPDS PREPARING for a VPD CONFIGURING a security administrator CONFIGURING the application scenario CONFIGURING A VPD DEFINE an application context DEFINE application context attributes ASSIGN attribute values DEFINE VPD policies MANAGING application contexts DROPPING an application context USING SYS_CONTEXT() MANAGING policies & security rules DROPPING a policy COLUMN-level policy CUSTOMIAZING policy attributes EXAMINING policy data
APPLICATION-BASED ENCRYPTION ALGORITHMIC adaptations STREAM vs. block ciphers CIPHER block modification ELECTRONIC code book (ECB) CIPHER block chaining (CBC) CIPHER feedback (CFB) OUTPUT feedback mode (OFB) CIPHER block padding PKCS #5 ABOUT DBMS_CRYPTO() WORKING with encryption data BASIC DBMS_CRYPTO() capabilities KEY generation ENCRYPTION & decryption SPECIFYING the encryption rules ALGORITHM specification BLOCK cipher chaining modifier specification BLOCK cipher padding modifier specification MESSAGE integrity capabilities HASH() MAC() A simple key management approach DATABASE storage APPLICATION logic storage
Prev
IMPLEMENTING VIRTUAL PRIVATE DATABASES UNDERSTANDING VPDS PREPARING for a VPD CONFIGURING a security administrator CONFIGURING the application scenario CONFIGURING A VPD DEFINE an application context DEFINE application context attributes ASSIGN attribute values DEFINE VPD policies MANAGING application contexts DROPPING an application context USING SYS_CONTEXT() MANAGING policies & security rules DROPPING a policy COLUMN-level policy CUSTOMIAZING policy attributes EXAMINING policy data
Next