Oracle 10g数据库安全指南：最新版B10773-01详解

需积分: 0 147 浏览量更新于2024-07-28 收藏 2.94MB PDF 举报

Oracle数据库安全指南（10g Release 1，版本10.1）是Oracle Corporation于2003年12月发布的重要文档，PartNo.B10773-01，由Laurel P. Hale、Jeffrey Levinger为主要作者，Ruth Baylis、Michele Cyran和John Russell等贡献编写。该指南详细阐述了Oracle数据库的安全策略、实践和配置，旨在确保数据的完整性和保密性，以适应企业级应用环境。该指南涵盖了关键的主题，如身份验证与授权管理、访问控制、审计日志、加密技术、网络安全以及针对SQL注入、跨站脚本攻击等常见威胁的防护措施。它强调了Oracle Database 10g的安全特性，如Oracle Secure Backup (OSB)、Real Application Security (RAS)、Data Redaction等，以及如何实施安全最佳实践来抵御日益复杂的威胁。版权方面，Oracle Corporation保留所有权利，用户在使用这些软件和文档时必须遵守包含限制使用和披露条款的许可证协议。未经许可，禁止对程序进行逆向工程、拆解或反编译，除非是为了实现与其他独立创建软件的互操作性，或者法律另有规定。文档内容可能会随时更新，因此在使用过程中如果发现任何问题，用户应书面报告给Oracle Corporation。此外，尽管Oracle提供了这一指南，但并不保证其中没有错误。用户在实际操作时仍需根据具体环境和需求进行适当的调整和安全评估。 Oracle Database Security Guide 10g Release 1是任何使用Oracle数据库的组织不可或缺的参考资料，它不仅提供了全面的安全框架，还提供了实用的指导，帮助管理员保护数据库免受各种安全威胁，确保业务连续性和数据完整性。

xvi

How to Implement Policy Groups ......................................................................................... 14-32

Step 1: Set Up a Driving Context..................................................................................... 14-32

Step 2: Add a Policy to the Default Policy Group......................................................... 14-33

Step 3: Add a Policy to the HR Policy Group................................................................ 14-33

Step 4: Add a Policy to the FINANCE Policy Group ................................................... 14-34

Validation of the Application Used to Connect ................................................................... 14-34

How to Add a Policy to a Table, View, or Synonym................................................................. 14-35

DBMS_RLS.ADD_POLICY Procedure Policy Types........................................................... 14-36

Optimizing Performance by Enabling Static and Context Sensitive Policies .................. 14-38

About Static Policies.......................................................................................................... 14-39

About Context Sensitive Policies..................................................................................... 14-39

Adding Policies for Column-Level VPD............................................................................... 14-40

Default Behavior................................................................................................................ 14-41

Column Masking Behavior .............................................................................................. 14-42

Enforcing VPD Policies on Specific SQL Statement Types................................................. 14-44

Enforcing Policies on Index Maintenance...................................................................... 14-44

How to Check for Policies Applied to a SQL Statement......................................................... 14-44

Users Who Are Exempt from VPD Policies............................................................................... 14-45

SYS User Exempted from VPD Policies................................................................................. 14-45

EXEMPT ACCESS POLICY System Privilege ...................................................................... 14-46

Automatic Reparse.......................................................................................................................... 14-46

VPD Policies and Flashback Query............................................................................................. 14-47

15 Preserving User Identity in Multitiered Environments

Security Challenges of Three-tier Computing............................................................................ 15-2

Who Is the Real User? ................................................................................................................ 15-2

Does the Middle Tier Have Too Much Privilege?.................................................................. 15-2

How to Audit? Whom to Audit?.............................................................................................. 15-3

What Are the Authentication Requirements for Three-tier Systems? ................................ 15-3

Client to Middle Tier Authentication ............................................................................... 15-3

Middle Tier to Database Authentication.......................................................................... 15-3

Client Re-Authentication Through Middle Tier to Database........................................ 15-4

Oracle Database Solutions for Preserving User Identity.......................................................... 15-5

Proxy Authentication................................................................................................................. 15-5

Passing Through the Identity of the Real User by Using Proxy Authentication ....... 15-5

xvii

Limiting the Privilege of the Middle Tier........................................................................ 15-7

Re-authenticating The User through the Middle Tier to the Database ....................... 15-8

Auditing Actions Taken on Behalf of the Real User .................................................... 15-10

Advantages of Proxy Authentication............................................................................. 15-10

Client Identifiers....................................................................................................................... 15-11

Support for Application User Models by Using Client Identifiers............................ 15-11

Using the CLIENT_IDENTIFIER Attribute to Preserve User Identity...................... 15-12

Using CLIENT_IDENTIFIER Independent of Global Application Context............. 15-12

16 Developing Applications Using Data Encryption

Securing Sensitive Information..................................................................................................... 16-2

Principles of Data Encryption........................................................................................................ 16-3

Principle 1: Encryption Does Not Solve Access Control Problems..................................... 16-3

Principle 2: Encryption Does Not Protect Against a Malicious DBA ................................. 16-4

Principle 3: Encrypting Everything Does Not Make Data Secure....................................... 16-5

Solutions For Stored Data Encryption in Oracle Database...................................................... 16-6

Oracle Database Data Encryption Capabilities...................................................................... 16-6

Data Encryption Challenges........................................................................................................... 16-8

Encrypting Indexed Data .......................................................................................................... 16-9

Key Management........................................................................................................................ 16-9

Key Transmission ..................................................................................................................... 16-10

Key Storage................................................................................................................................ 16-10

Storing the Keys in the Database .................................................................................... 16-10

Storing the Keys in the Operating System..................................................................... 16-12

Users Managing Their Own Keys................................................................................... 16-12

Changing Encryption Keys..................................................................................................... 16-12

Binary Large Objects (BLOBS)................................................................................................ 16-13

Example of a Data Encryption PL/SQL Program...................................................................... 16-13

Example of Encrypt/Decrypt Procedures for BLOB Data ....................................................... 16-15

Glossary

Index

xix

List of Tables

1–1 Security Issues by Category................................................................................................ 1-3

3–1 Issues and Actions for Policies to Address....................................................................... 3-2

3–2 References Terms and Chapters for Oracle Features and Products.............................. 3-4

5–1 System Privileges for Named Types................................................................................ 5-15

5–2 Privileges for Object Tables............................................................................................... 5-17

5–3 Topics and Sections in This Section................................................................................. 5-20

6–1 Policy Types and Run-Time Efficiencies........................................................................... 6-9

7–1 Parameters Controlling Re-Use of an Old Password.................................................... 7-15

7–2 Default Accounts and Their Status (Standard Installation)......................................... 7-22

8–1 Auditing Types and Descriptions...................................................................................... 8-3

8–2 Columns Shown in the Database Audit Trail (DBA_AUDIT_TRAIL)......................... 8-4

8–3 Auditing Actions Newly Enabled by Oracle Database 10g ......................................... 8-11

10–1 Predefined Roles............................................................................................................... 10-18

11–1 ADD_POLICY Procedure Parameters........................................................................... 11-36

11–2 DROP_POLICY Procedure Parameters......................................................................... 11-38

11–3 ENABLE_POLICY Procedure Parameters.................................................................... 11-39

11–4 DISABLE_POLICY Procedure Parameters................................................................... 11-40

12–1 How Privileges Relate to Schema Objects ..................................................................... 12-14

12–2 SQL Statements Permitted by Database Object Privileges......................................... 12-15

13–1 Key to Predefined Attributes in USERENV Namespace............................................ 13-12

14–1 Types of Application Contexts......................................................................................... 14-2

14–2 DBMS_RLS Procedures ................................................................................................... 14-35

14–3 DBMS_RLS.ADD_POLICY Policy Types At a Glance................................................ 14-37

14–4 V$VPD_POLICY............................................................................................................... 14-45

16–1 DBMS_CRYPTO and DBMS_OBFUSCATION_TOOLKIT Feature Comparison..... 16-7

剩余423页未读，继续阅读

jiangwm_shy

粉丝: 0
资源: 3

Oracle 10g数据库安全指南：最新版B10773-01详解

Oracle安全设置细节

Oracle安全实践

Oracle安全全接触

oracle安全手册

oracle 安全手册

oracle安全管理

Oracle 安全手册

Oracle安全手册

Oracle安全概要

Oracle安全讲义

最新资源