Oracle 11g安全宝典：黑客防御与实战

需积分: 2 190 浏览量更新于2024-07-18 收藏 2.51MB PDF 举报

"Oracle 11g Anti-hacker's Cookbook'是一本专为Oracle数据库安全领域的专业人士设计的实用指南，由Adrian Neagu编著，由Packt Publishing于2012年出版。该书在保障数据库安全的同时，也深入探讨了Oracle 11g版本在抵御黑客攻击方面的策略和技术。全书共包含了超过50个详尽的菜谱（即解决方案）和实际场景，旨在帮助读者理解和实践如何有效地保护Oracle数据库免受黑客的侵犯。书中内容涵盖了广泛的主题，如安全设置、权限管理、加密技术、防火墙配置、审计跟踪、入侵检测系统（IDS）、数据防护措施以及应对各种常见攻击手法的方法，如SQL注入、跨站脚本（XSS）和操作系统级攻击等。作者不仅阐述了理论概念，还提供了实战操作步骤，使读者能够在实际环境中应用这些反黑客技巧。值得注意的是，尽管本书强调了技术细节，但读者必须理解，所有提供的信息都是基于作者的专业知识和当时的技术环境，并非保证无误。在阅读过程中，读者应结合自身的实际情况和最新的安全更新进行调整。此外，版权法规定，除非获得出版商的书面许可，否则未经允许不得复制、存储或通过任何形式传播书中的内容。在版权页上明确指出，尽管Packt Publishing已尽最大努力确保信息的准确性，但对书中内容导致的任何直接或间接损失，无论是明示的还是暗示的，作者、Packt Publishing及其经销商概不负责。最后，尽管书中尽可能地列出了商标信息，但出版社无法保证其准确性，读者在引用时需自行核实。 'Oracle 11g Anti-hacker's Cookbook'是一本既富有实战价值又兼具理论深度的工具书，对于维护Oracle数据库的安全性具有很高的参考价值，适合IT安全管理员、DBA以及对Oracle安全感兴趣的读者深入学习和提升防范能力。"

iii

Table of Contents

Chapter 8: Tracking and Analysis: Database Auditing 255

Introduction 255

Determining how and where to generate audit information 256

Auditing sessions 259

Auditing statements 261

Auditing objects 264

Auditing privileges 265

Implementing ne-grained auditing 268

Integrating Oracle audit with SYSLOG 272

Auditing sys administrative users 274

Appendix: Installing and Conguring Guardium, ODF, and OAV

You can download the Free Download Chapter from

http://www.packtpub.com/sites/default/files/downloads/5269EN_

AppendixA_Installing_and_Configuring_Guardium_ODF_and_OAV.pdf

Index 277

Preface

For almost all organizations, data security is a matter of prestige and credibility. The Oracle

Database is one of the richest in features and one of the most used databases in a variety

of industries. Oracle has implemented security technologies to achieve a reliable and solid

system. In this book, you will learn some of the most important solutions that can be used for

better database security. This book covers all the important security measures and includes

various tips and tricks to protect your Oracle Database. This book uses real-world scenarios to

show you how to secure the Oracle Database server against different attack scenarios.

What this book covers

Chapter 1, Operating System Security, covers Tripwire and how it can be used for le integrity

checking and intrusion detection in the rst section. In the second and third sections, security

measures related to user account security, network services and ports, security kernel

tunables, local and remote login, and SSH are covered.

Chapter 2, Securing the Network and Data in Transit, contains recipes that explain how to

secure data in transit, and covers the most important aspects related to Oracle listener

security. In the rst section, a step-by-step, classical, man-in-the-middle-type attack scenario

is presented, in which an attacker placed in the middle hijacks an Oracle session, followed by

the main measures to confront different interception-type attacks by using Oracle Advanced

Security encryption and integrity, and alternatives such as IPSEC, stunnel, and SSH tunneling.

The last part of this chapter has listener security as its main subject, covering features such

as on-the-y administration restriction, securing external procedure execution (

extproc), and

client connection control.

Chapter 3, Securing Data at Rest, contains recipes that explain how to use data at rest

encryption, using an OS native method with LUKS for block device encryption, eCryptfs for

lesystem encryption,

DBMS_CRYPTO for column encryption, and Oracle Transparent Data

Encryption for columns, tablespaces, data pump dumps, and database backups created

with RMAN.

Preface

Chapter 4, Authentication and User Security, covers how to perform a security assessment

using Oracle Enterprise Manager built in the policy security evaluation feature; the usage

of a password cracker to check the real strength of database passwords; how to implement

password policies and enforce the usage of strong passwords by using customized user

proles, secure application roles, passwordless authentication using external password

stores, and SSL authentication.

Chapter 5, Beyond Privileges: Oracle Virtual Private Database, covers Oracle Virtual Private

Database technology; here you will learn about session-based application contexts, how to

implement row-level access policies using PL/SQL interface and OEM, column-level access

policies, grouped policies, and how to implement exemptions from VPD policies.

Chapter 6, Beyond Privileges: Oracle Label Security, covers how to apply OLS label

components to enforce row-level security, the usage of OLS compartments and groups for

advanced row segregation, special label policy privileges, and how to grant access to label-

protected data by using trusted stored units.

Chapter 7, Beyond Privileges: Oracle Database Vault, covers the main components of Oracle

Database Vault, such as realm, command rules, rulesets, and factors, and how to use them to

secure database access and objects. The last recipe covers the Oracle Database Vault audit

and reporting interface, and how to use this interface for creating audit reports and various

database entitlement reports.

Chapter 8, Tracking and Analysis: Database Auditing, covers the main aspects of the Oracle

standard audit framework, such as session, statement, object and privilege auditing, ne-

grained security, sys audit, and the integration of a standard audit with SYSLOG on Unix-like

systems.

Appendix, Installing and Conguring Guardium, ODF, and OAV, covers the installation and

conguration of IBM InfoSphere Database Security Guardium and how to perform security

assessments, installation, and conguration of Oracle Database Firewall. It also covers

the key capabilities and features, such as dening enforcement points and monitoring,

installation, and conguration of Oracle Database Vault, its key capabilities, covering central

repository installation, agent and collector deployments, and its reporting and real-time

alerting interface.

This chapter is not present in the book, but is available as a free download from the

link http://www.packtpub.com/sites/default/files/downloads/5269EN_

AppendixA_Installing_and_Configuring_Guardium_ODF_and_OAV.pdf

剩余301页未读，继续阅读

dbguru

粉丝: 0
资源: 6

Oracle 11g安全宝典：黑客防御与实战

Anti-Hacker ToolKit.chm

Anti-Hacker Tool Kit

hacker's delight 第二版

new online judge1020

我想学习pandas数据分析

c语言编程题及其答案,c语言编程题目及答案.doc

推荐一个可以在线练习pandas代码的学习平台

JavaScript在线考试

kali linuk书籍

学习编程刷题网站推荐两个

最新资源