CHAPTER 5: Securing Oracle
by Bill Grindlay, John Heasman, Chris Anley, David Litchfield
The Database Hacker's Handbook: Defending Database Servers
- Cover Page
- Title Page
- Copyright
- Dedication
- About the Author
- Credits
- Contents
- Preface
- Acknowledgements
- Introduction
- Part I: Introduction
- Part II: Oracle
- Part III: DB2
- Part IV: Informix
- CHAPTER 10: The Informix Architecture
- CHAPTER 11: Informix: Discovery, Attack, and Defense
- CHAPTER 12: Securing Informix
- Keep the Server Patched
- Encrypt Network Traffic
- Revoke the Connect Privilege from Public
- Enable Auditing
- Revoke Public Permissions on File Access Routines
- Revoke Public Execute Permissions on Module Routines
- Preventing Shared Memory from Being Dumped
- Preventing Local Attacks on Unix-Based Servers
- Restrict Language Usage
- Useful Documents
- Part V: Sybase ASE
- Part VI: MySQL
- Part VII: SQL Server
- Part VIII: PostgreSQL
- APPENDIX A: Example C Code for a Time-Delay SQL Injection Harness
- APPENDIX B: Dangerous Extended Stored Procedures
- APPENDIX C: Oracle Default Usernames and Passwords
- Index
CHAPTER 5
Securing Oracle
Securing Oracle is a much more difficult proposition than securing other database servers. The reason for this is quite simple — the Oracle RDBMS is huge. What follows are some useful low-cost steps that will help to secure your Oracle environments.
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.