Oracle Security

Dedication;
Preface;
What This Book Is;
What This Book Is Not;
Audience for This Book;
Conventions Used in This Book;
Platforms and Versions of Oracle;
Comments and Questions;
Acknowledgments;
Security in an oracle System;
Chapter 1: Oracle and Security;
1.1 What’s It All About?;
1.2 The Oracle Security Model;
1.3 Procedures, Policies, and Plans;
1.4 If I Had a Hammer...;
Chapter 2: Oracle System Files;
2.1 What’s in the Files?;
2.2 The Instance and the Database: Starting an Oracle Database;
2.3 Types of Database Files;
Chapter 3: Oracle Database Objects;
3.1 The User Interface: User Versus Schema;
3.2 Objects;
3.3 Tables;
3.4 Table Triggers;
3.5 Views;
3.6 Stored Programs;
3.7 Synonyms;
3.8 Privileges;
3.9 Roles;
3.10 Profiles;
Chapter 4: The Oracle Data Dictionary;
4.1 Creating and Maintaining the Data Dictionary;
4.2 The Data Dictionary Views;
4.3 About SQL.BSQ;
4.4 Views Used for Security;
4.5 The Composition of the Views;
Chapter 5: Oracle Default Roles and User Accounts;
5.1 About the Defaults;
5.2 The CONNECT Role;
5.3 The RESOURCE Role;
5.4 The DBA Role;
5.5 The SYSDBA and SYSOPER Roles;
5.6 Using the Default Roles;
5.7 Default User Accounts;
5.8 Segmenting Authority in the Database;
Chapter 6: Profiles, Passwords, and Synonyms;
6.1 Profiles;
6.2 Passwords;
6.3 Synonyms;
Implementing Security;
Chapter 7: Developing a Database Security Plan;
7.1 About the Security Policy and Security Plan;
7.2 Types of Accounts;
7.3 Standards for Accounts;
7.4 Standards for Usernames;
7.5 Standards for Passwords;
7.6 Standards for Roles;
7.7 Standards for Views;
7.8 Standards for the Oracle Security Server;
7.9 Standards for Employees;
7.10 Sample Security Plan Index;
7.11 Sample Security Plan Checklist;
Chapter 8: Installing and Starting Oracle;
8.1 Segmenting Application Processing;
8.2 Installing Oracle Securely;
8.3 Connecting to the Database Without a Password;
8.4 Installing and Configuring SQL*Net;
8.5 Setting Up Initialization Parameters for Security;
Chapter 9: Developing a Simple Security Application;
9.1 The Application Overview;
9.2 Preparing the Role-Object Matrix;
9.3 Views;
9.4 Roles;
9.5 Grants;
9.6 Application Control of Access;
Chapter 10: Developing an Audit Plan;
10.1 Why Audit?;
10.2 Where to Audit;
10.3 How Auditing Works;
10.4 Auditing and Performance;
10.5 Default Auditing;
10.6 Types of Auditing;
10.7 Purging Audit Information;
Chapter 11: Developing a Sample Audit Application;
11.1 About the Audit Trail Application;
11.2 About Performance and Storage;
11.3 Using the Audit Data in Reports;
11.4 SQL Scripts to Generate Scripts;
Chapter 12: Backing Up and Recovering the Database;
12.1 What Are the Backup Options?;
12.2 What’s New for Oracle8?;
12.3 What Are the Recovery Options?;
Chapter 13: Using the Oracle Enterprise Manager;
13.1 What Is the OEM?;
13.2 The DBA Toolkit and Security;
13.3 OEM and the Job Scheduler;
13.4 OEM and the Event Management System;
Chapter 14: Maintaining User Accounts;
14.1 Application Design Requirements;
14.2 Running the Application;
14.3 Documenting the User State;
14.4 A Sample Script;
Enhanced Oracle Security;
Chapter 15: Using the Oracle Security Server;
15.1 About Cryptography;
15.2 Ways to Authenticate Users;
15.3 What’s in the OSS?;
15.4 Configuring and Using the OSS;
Chapter 16: Using the Internet and the Web;
16.1 Web Basics;
16.2 Evaluating Web Assets and Risks;
16.3 Protecting a Web Site;
16.4 Getting Users Involved;
Chapter 17: Using Extra-Cost Options;
17.1 Trusted Oracle;
17.2 Advanced Networking Option;
17.3 Oracle Application Server;
References;
Oracle Books;
Security Books;
Oracle Electronic References;
Security Electronic References;
Colophon;