Expert Oracle Application Express Security

Overview

Expert Oracle Application Express Security covers all facets of security related to Oracle Application Express (APEX) development. From basic settings that can enhance security, to preventing SQL Injection and Cross Site Scripting attacks, Expert Oracle Application Express Security shows how to secure your APEX applictions and defend them from intrusion.

Security is a process, not an event. Expert Oracle Application Express Security is written with that theme in mind. Scott Spendolini, one of the original creators of the product, offers not only examples of security best practices, but also provides step-by-step instructions on how to implement the recommendations presented. A must-read for even the most experienced APEX developer, Expert Oracle Application Express Security can help your organization ensure their APEX applications are as secure as they can be.

What you’ll learn

• Devise and execute a security plan
• Ensure your installation of APEX is configured most securely
• Prevent SQL Injection, cross site scripting, and URL tampering attacks
• Protect your data during all phases of its lifetime
• Applysecurity features built into the database layer
• Design APEX applications to safely be deployed on the Internet

Who this book is for

Expert Oracle Application Express Security is aimed at developers and administrators deploying applications created using Oracle Application Express (APEX). The topic is especially important when those applications are public-facing or involve sensitive data. Any Application Express developer or administrator who wants to sleep well at night in an era of network intrusion and data thievery will want this book.

Table of Contents

Introduction

Part I: Security Plan

1. Threat Analysis and Assessment

2. Implementing a Security Plan

Part II: APEX Settings

3. Architecture

4. Instance Settings

5. Workspace Settings

6. Application Settings

7. Mobile Settings

Part III: User Access

8. User Management

9. User Authorization

Part IV: Data Access

10.Secure Export to CSV

11. Secure Views

12. VPD & OLS

13. Shadow Schema

14. Encryption

Conclusion

Read More