oracle security

New Features 23c, Overview (in extracts):

In this blog I want to introduce some of the new features of the Oracle 23c developer edition. It will be only a selection of some of the main features. It is not the intention to give you a thorough(…)

Oracle TDE part I : Configuring the Encryption

By Mouhamadou Diaw Oracle gives us some tools to secure our data in transit and in rest. Oracle Transparent Data Encryption will allow us to encrypt data in rest. Oracle TDE need The Oracle Advanced Security License Oracle TDE(…)

Oracle 21c Gradual Password Rollover : Tracking old password usage

By Mouhamadou Diaw In a previous blog, I talked about the new feature in Oracle 21c, which allows an old and new password to be valid during a period of time. This feature, Gradual Database(…)

From Oracle Standard Auditing to Oracle Unified Auditing

In this post, I will not show you all advantages related to Oracle Unified Auditing. For that, read the oracle documentation. You can also read the blogs written by my colleagues : Oracle 12c Unified Auditing Feature in(…)

Oracle 21c Security : Mandatory Profile

By Mouhamadou Diaw With Oracle 21c, it is now possible to enforce a password policy (length, number of digits…) for all pluggable databases or for specific pluggable databases via profiles. This is done by creating a mandatory profile in the(…)

Oracle 21c Security : ORA_STIG_PROFILE and ORA_CIS_PROFILE

By Mouhamadou Diaw In my previous blog I was testing the creation of a new Oracle 21c database. In this blog I am talking about two changes about the security. In each new(…)

Database Vault : Rules, Rule Sets and Command Rules

By Mouhamadou Diaw In a previous blog I talked about protecting data using Realms. With Database Vault we can also protect our database against some SQL statements. These statements can include SELECT, ALTER SYSTEM, database(…)

Oracle Database Vault: Realm in a Pluggable Database

By Mouhamadou Diaw Database Vault can also be used in a multitenant environment. In a multitenant environment we must register Oracle Database Vault in the root first, then after in the PDBs. In this blog we will see how(…)

Oracle Virtual Private Database

By Mouhamadou Diaw Oracle Virtual Private Database (VPD) enables you to dynamically add a WHERE clause in any SQL statement that a user executes. The WHERE clause filters the data the user is allowed to access, based on the identity(…)