I wrote a 60 or so page paper called Exploiting and protecting Oracle around 5 years ago when I worked for Pentest Ltd. I have had a link to this paper on my Oracle Security white papers page for a long time, someone told me via email today that the link was broken. I have fixed the link to point at the original paper. This paper is dated a little but it still contains some good stuff related to Oracle security and some ideas of where to investigate if you want to research the subject. I was chatting to Alex when we got together in the states a couple of months ago and I had a chnace to go and find something in this paper to show the source of an idea. have a read!
Blog
Pete Finnigan's Oracle Security Weblog
This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.
[Previous entry: "Rationalization, Sex, and Oracle"] [Next entry: "Project Lockdown"]
May 2006
- Patched Oracle database 'still vulnerable' - 05/01/2006 by 05/01/2006
- Researcher: Oracle Needs To Patch 44 More Bugs - 05/03/2006 by 05/03/2006
- Oracle keeps many users waiting on April patches - 05/04/2006 by 05/04/2006
- Interesting thoughts on the Andrew Max blog about the recent 0-day view issue - 05/05/2006 by 05/05/2006
- Patched Oracle database still at risk, bughunter says - 05/06/2006 by 05/06/2006
- An Oracle security blog from Oracle - 05/07/2006 by 05/07/2006
- Oracle Internals: A good post by Doug about DUDE - 05/08/2006 by 05/08/2006
- Oracle refuses to learn its lesson, experts say - 05/11/2006 by 05/11/2006
- David Litchfield has a new blog - 05/15/2006 by 05/15/2006
- Egor Starostin has a blog - 05/16/2006 by 05/16/2006
- Password recommendations on Eddies blog - 05/18/2006 by 05/18/2006
- An excellent post by Lucas about object chnages and RSS feeds - 05/22/2006 by 05/22/2006
- Cisco, others invest $6.3m in Guardium - 05/23/2006 by 05/23/2006
- Exploiting and protecting Oracle - 05/25/2006 by 05/25/2006
- Project Lockdown - 05/26/2006 by 05/26/2006
- Views on Mary Ann and an article about buggy code - 05/31/2006 by 05/31/2006
Archives
Syndication
Powered by gm-rss 2.0.0
