Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on...
Transcript of Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on...
![Page 1: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/1.jpg)
ORACLE SECURITY OPTIONSPEOUG’ 20092009 Lima, Peru
By:
Francisco Munoz Alvarez
![Page 2: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/2.jpg)
ORACLE SECURITY OPTIONS(Based on Oracle EMEA Security Workshop)
Francisco Munoz Alvarez
Oracle ACE Director
President CLOUG, LAOUC & NZOUG
8/9/10g/11g OCP, RAC OCE, AS OCA, E-Business OCP, SQL/PLSQL OCA, Oracle 7 OCM
Oracle 7 & 11GR2 Beta Tester
ITIL Certified
Blog: www.oraclenz.com - Email: [email protected] – Twitter : fcomunoz
Blog: www.oracleenespanol.com - Comunidad Oracle: www.oraclemania.ning.com
CEO at DBIS ™
Database Integrated Solutions www.dbisonline.com
www.dbis.co.nz
![Page 3: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/3.jpg)
Information Security Has Changed
![Page 4: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/4.jpg)
Hacking Steps
![Page 5: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/5.jpg)
OFFICIAL STATISTICS
from Secret Service Germany
![Page 6: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/6.jpg)
COMPUTER CRIME DEVELOPMENT
![Page 7: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/7.jpg)
SOME SHORT FACTS
![Page 8: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/8.jpg)
HIGH SCORE LIST
![Page 9: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/9.jpg)
2007/2008 SHOPPING LIST
![Page 10: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/10.jpg)
CRISIS SHOPPING LIST 2009
![Page 11: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/11.jpg)
HACKING METHODS AND TECHNIQUES
![Page 12: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/12.jpg)
INSIDER ATTACKS EXAMPLES
European Headlines 2008
![Page 13: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/13.jpg)
THE INSIDER THREAT
![Page 14: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/14.jpg)
OFFICIAL STATISTICS
EXTERNAL/INTERNAL THREAT
![Page 15: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/15.jpg)
CONCLUSION
![Page 16: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/16.jpg)
Oracle Security Solutions
![Page 17: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/17.jpg)
Oracle Security Components
![Page 18: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/18.jpg)
DB ENVIRONMENT
![Page 19: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/19.jpg)
Security Data in Rest/Access Control
![Page 20: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/20.jpg)
WHAT IS ASO?
![Page 21: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/21.jpg)
What Security Problems does ASO
solve?
![Page 22: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/22.jpg)
ASO BENEFITS
![Page 23: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/23.jpg)
TDE – Transparent Data Encryption
![Page 24: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/24.jpg)
TDE – Transparent Data Encryption
![Page 25: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/25.jpg)
TDE – Transparent Data Encryption
![Page 26: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/26.jpg)
SECURING DATA IN MOTION
![Page 27: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/27.jpg)
NETWORK ENCRYPTION
![Page 28: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/28.jpg)
SECURING BACKUP
![Page 29: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/29.jpg)
SECURING BACKUP
Examples
![Page 30: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/30.jpg)
DATAMASKING
![Page 31: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/31.jpg)
WHAT IS DATAMASKING?
![Page 32: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/32.jpg)
PREVENT MODIFICATIONS BY
UNAUTHORIZED USERS
![Page 33: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/33.jpg)
WHAT IS DATA VAULT?
![Page 34: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/34.jpg)
DATA VAULT HELP TO SOLVE:
![Page 35: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/35.jpg)
DATA VAULT Vs
VPD and OLS
![Page 36: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/36.jpg)
DATABASE VAULT Realms and Rule
![Page 37: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/37.jpg)
DATA VAULT REPORTS
![Page 38: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/38.jpg)
DATA VAULT EXAMPLES
![Page 39: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/39.jpg)
HIGHLY SECURED ENVIROMENTS
AUDIT VALT
![Page 40: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/40.jpg)
AUDIT VAULT EXAMPLES
![Page 41: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/41.jpg)
AUDIT VAULT REPORTS
Who, What, When, Where
![Page 42: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/42.jpg)
AUDIT VAULT DASHBOARD
![Page 43: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/43.jpg)
AUDIT VAULT SUMMARY
![Page 44: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/44.jpg)
PROGRAM
The Oracle ACE Program is designed to recognize and reward members of theOracle Technology and Applications communities for their contributions to thosecommunities. These individuals are technically proficient (when applicable) andwillingly share their knowledge and experiences.
The program comprises two levels: Oracle ACE and Oracle ACE Director.
The former designation is Oracle's way of saying "thank you" to communitycontributors for their efforts; we (and the community) appreciate theirenthusiasm. The latter designation is for community enthusiasts who not onlyshare their knowledge (usually in extraordinary ways), but also want to increasetheir community advocacy and work more proactively with Oracle to findopportunities for the same. In this sense, Oracle ACE is "backward looking" andOracle ACE Director is "forward looking."
![Page 45: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/45.jpg)
PROGRAM
![Page 46: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/46.jpg)
PROGRAM
![Page 47: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/47.jpg)
PROGRAM
![Page 48: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/48.jpg)
Questions?
![Page 49: Oracle Security PEOUG09 - PEOUG - PERU Oracle Users Group · ORACLE SECURITY OPTIONS (Based on Oracle EMEA Security Workshop) Francisco Munoz Alvarez Oracle ACE Director President](https://reader030.fdocuments.net/reader030/viewer/2022011915/5fd1c2fe490eb85d3b49c6ab/html5/thumbnails/49.jpg)
Thank you !