Effective Oracle Database 10g Security by Design

by David C. Knox, Lisa McClain, David W. Carey

Publisher's Products purchased from Third Party sellers are not guaranteed by the publisher for quality, authenticity, or access to any online entitlements included with the product.

Protect Your Mission-Critical Data with Tips and Tricks from an Oracle Security Insider

Oracle expert David Knox has written the most practical, up-to-date book on Oracle Database 10g security available. With an emphasis on real-world problems and detailed solutions, Effective Oracle Database 10g Security by Designprovides all the information you need to develop and deploy secure database applications. The entire security cycle is covered--from identification and authentication to fine-grained access control and encryption to effective auditing techniques. The material is presented with comprehensive yet easy-to-understand examples that show how to use all the security technologies in a complementary way.

Assess database vulnerabilities and develop effective security policiesPreserve user identity with in-depth analyses of JDBC connection pools, proxy authentication, and client identifiersManage database users from a central directory without sacrificing securityLock down database access using secure application rolesLeverage application and database security within Oracle’s Identity Management infrastructureValidate user privileges by using simple views and scriptsProtect individual data elements by using the new Oracle DBMS_CRYPTO packageExploit database views to provide row-level and column-level fine-grained access controlsEnforce need-to-know access and data privacy with Virtual Private Database and Oracle Label SecurityEnsure user accountability with Oracle fine-grained Auditing

560 pages, Paperback

First published January 1, 2004

Reviews

[Bryan · Rating 3 out of 5]

It is a good book about the security basics of Oracle. The author did a good job of covering VPD (Row Level Security) and how to use it including the role of contexts. He also included a chapter about Oracle Label Security which is a different spin on row level security that originated out of the Government work that Oracle did.

Definitely worth a read for those Oracle professionals who wanted to get a broad overview of the different security mechanisms in Oracle and recommendations on how and when to implement them.