fbpx
 

Tag: security

Ethical Hackers Find Oracle Vulnerability
Wayne FedericoDatabase security, Risk, Security Assessments, Security RiskLeave a Comment on Ethical Hackers Find Oracle Vulnerability

CNN recently interviewed two hackers Bryan Seely Ben Caudill, who discovered an unsettling security hole, uncovering intimate details like children’s school records, including detailed bus route information; arrest and prosecution information from a major Midwestern city; and the real names and numbers of intelligence agents visiting a major American port.

SANS Critical IT Security Controls #4: Secure Configurations for Network Devices
Sam AlapatiDatabase security, DSS (Data Security Standard), Oracle database, Oracle: News You Can UseLeave a Comment on SANS Critical IT Security Controls #4: Secure Configurations for Network Devices

Network configuration includes the configuration of all network devices such as firewalls, routers and switches. Often times, an initially secure network configuration becomes somewhat insecure over time, as occasional configuration changes are made to the network to accommodate temporary needs.

SANS Critical IT Security Controls #1 – Inventory your devices
Sam AlapatiSecurity Assessments, Security RiskLeave a Comment on SANS Critical IT Security Controls #1 – Inventory your devices

Cyber attackers are constantly devising ways to hack into computer systems. You may have several test and development databases lying around across your in a semi-protected fashion. Or, your company may have recently bought and assigned a bunch of laptops. It’s essential that you patch ALL the computing devices in your environment, regardless of the purpose those devices may serve. In order to do this, however, you must first know the devices that your company owns. Even a small company […]

Using Oracle Database Firewall
Scott D. RosenbergAccess management, Center of Internet Security (CIS), Compliance, Contract Lifecycle management, Cost Containment/Negotiation, Database security, DSS (Data Security Standard), Enterprise Agreement, GRC (Governance, HIPAA, Identity management, IT Asset Management, IT Security, Licensing Change Alert, Microsoft Licensing Compliance, Microsoft Licensing Tip, Microsoft: News You Can Use, Miro News, Oracle database, Oracle Licensing Compliance, Oracle Licensing Tip, Oracle: News You Can Use, PCI (Payment Card Industry), Risk, Security Assessments, Security Risk, software asset management, Software audit, SQL, Uncategorized, VirtualizationLeave a Comment on Using Oracle Database Firewall

We’re all familiar with network firewalls, which prevent unauthorized access to your network from external sources. However, network firewalls don’t protect your databases from malicious attacks, which sometimes come disguised as privileged internal users. Web applications are a major source of data attacks, through stratagems such as SQL Injection, for example. Oracle’s Database Firewall (a product Oracle gained through its acquisition of Secerno, a British firm, in 2010) offers a solid defensive perimeter to monitor and enforce accepted behavior on […]

In Archive