fbpx
 

Category: Oracle: News You Can Use

SANS 20 Critical Controls #9: Controlled Access Based on Need to Know

The first step you must take is to identify your sensitive data, by establishing a data identification scheme. A multi level data sensitivity classification based on the sensitive level of the data is especially useful.

SANS 20 Critical IT Controls #8: Controlled Use of Administrative Privileges

A common technique used b y hackers is to guess the passwords for administrative users to gain access to a server, and from there compromise vast swatches of a system. Hackers are constantly devising powerful password cracking tools to see if they could grab a system admin or network admin’s password.

SANS 20 Critical IT Controls #7: Application Software Security

While strengthening your network and perimeter security does keep potential attackers away, you do want people to access your web sites and web application, of course. Unfortunately, while most users access your applications and web sites for legitimate purposes, you can’t control the user input.

SANS Critical IT Security Controls #4: Secure Configurations for Network Devices

Network configuration includes the configuration of all network devices such as firewalls, routers and switches. Often times, an initially secure network configuration becomes somewhat insecure over time, as occasional configuration changes are made to the network to accommodate temporary needs.

Oracle Advanced Security Option

Most people are aware of Oracle’s Advanced Security Option (ASO), but many aren’t quite sure as to what exactly this option offers you. I know most people understand that data encryption is the most common reason one looks at the ASO option, but they aren’t quite sure how it works. They are also not completely aware of the other benefits of ASO. The ASO data encryption feature is very flexible and fairly easy to implement. Unlike a homemade encryption solution, […]

In Archive