Category Archives: infosec
Four things a developer can do now to improve their applications #infosec posture.
Lets face it, we have deadlines to meet and millions of lines of code in production. I get it, I’ve been a working PL/SQL developer off and on for over 20 years. If we get into the habit of using … Continue reading
Posted in infosec, PL/SQL, Security, Trusted Path
Tagged #DEVELOPMENT, infosec, oracle
Leave a comment
Four things a DBA can do now to improve their #infosec posture?
August 13, 2018: NOTE UPDATE TO POST THIS IS SPECIFIC TO Oracle 12.1 and bellow. Oracle 12.2 and above, you can change an unencrypted tablespace to an encrypted tablespace. 1) When we start talking about securing information, the first thing that … Continue reading
Posted in Audit, encryption, infosec, Security, Trusted Path, VPD
Tagged action, dba, infosec, oracle
Leave a comment
#Oracle #Infosec Common Mistakes: Granting DBA to application schema
I’m keep seeing this common mistake; The application schema was granted DBA privileges. Here is the problem, when a sql injection bug is found, then all DBA commands are available to the attacker. The truth is, granting DBA to an … Continue reading
Questions you may want to start with when moving to the #cloud
Last week one of my customers called me into a meeting to discuss moving a critical application to the cloud. This application is very sensitive to the customer and the data it holds is very sensitive to my customers customer. … Continue reading
Demo code for Ghost Data in Indexes
NOTE: all demo data is fake. This is the demo code for encrypting data where there is an existing index. We are starting with a table customers_tst that is in the unencrypted tablespace dat. start with dropping the old test … Continue reading
2015 #InfoSec in review. We get a big fat “F”
We are stewards of our customers data and need to do better. <OPINION> I would give us a big fat “F” for data security in 2015.</OPINION> What happened and what needs to be improved? We saw weak passwords, lack of … Continue reading
#Oracle #TDE Ghost Data Teaser
Here is a teaser for the Oracle Transparent Data Encryption presentation We look at having an existing table with existing indexes. A policy comes out that says we need to encrypt SSN and Credit Card Numbers. Once we encrypt the … Continue reading
Posted in Database Stuff, encryption, infosec, Security
Tagged Encryption, GHOST, infosec, oracle
Leave a comment
Oracle #OTN #OPSEC #TMTT
Oracle Technology Network Two Minute Tech Tip. Oracle Transparent Data Encryption.
Posted in Database Stuff, encryption, infosec, Security
Tagged Encryption, GHOST, infosec, oracle
Leave a comment