What You Will Learn 1. Oracle Environments - terminology - components and products - platforms - architecture - basic risks and exposures - demonstration: getting started
2. Oracle Objects - basic data objects - program-type objects - evidence: data dictionary and dynamic performance "views" - case study: delineating the environment and determining the required evidence
3. The Security Mechanism - high-risk users - user identification - authentication - roles and profiles - system privileges - object privileges - SQL DCL: GRANTS and REVOKES - case study: analyzing basic access controls
4. Security Features - views - stored procedures and triggers - product_user_profile - remote login password files - virtual private databases - OS file security - encryption - case study: evaluating security features use
5. Database Record Mechanisms - objectives - methods - the audit feature - fine grain auditing - alert trace files - case study: assessing recording mechanisms use
6. Integrity Features - constraints - referential integrity - triggers - change management - deadlocks - missing updates - case study: evaluating integrity feature use
7. High-Risk Commands and Utilities - Data Guard - backup/recovery - scripts - enterprise manager - SET commands - parameter files - case study: analyzing the operational environment
8. Organizational Impact - security profiles - roles and responsibilities - auditing the DBA function - areas for standardization - audit questions - case study: preparing to interview the DBA
9. Audit and Security Approaches - general risks - audit types - sample audit program - security checklist - case study: reporting audit and security findings
10. Wrap-Up - objectives review - evaluations
|