There was an interesting post on my Oracle security forum yesterday by Marcel-Jan about using event ORA-942 to detect if someone is attempting to access tables that do not exist. This post is titled "ORA-942 as addition to auditing" and is an interesting idea. It will be interesting to test this to see if the performance hit would be too great. It would be interesting to compare this with table access audit on error and also with system error triggers.
Its an interesting idea if you know anything of SQL Server as it can use trace for detailed level audit.
Blog
Pete Finnigan's Oracle Security Weblog
This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.
[Previous entry: "I will be speaking at the IT Underground in Rome"] [Next entry: "Pete Finnigan podcast interview on Oracle security"]
September 2006
- Nice post on an undocumented function - Reverse - 09/01/2006 by 09/01/2006
- Interesting post about protecting PL/SQL - 09/03/2006 by 09/03/2006
- I will be speaking at the IT Underground in Rome - 09/04/2006 by 09/04/2006
- Nice idea on audition using trace events - 09/05/2006 by 09/05/2006
- Pete Finnigan podcast interview on Oracle security - 09/07/2006 by 09/07/2006
- Nice network trace tool - 09/08/2006 by 09/08/2006
- Identity theft is becoming main stream - 09/09/2006 by 09/09/2006
- IT Underground conference in Rome cancelled at last minute - 09/12/2006 by 09/12/2006
- Cache missing for fun and profit - 09/15/2006 by 09/15/2006
- Pete Finnigan at UKOUG 2006 - 09/18/2006 by 09/18/2006
- Exploit screencasts - 09/19/2006 by 09/19/2006
- Two years of Oracle Security blogging and still going strong - 09/20/2006 by 09/20/2006
- Only 6% of identity theft can be attributed to data theft. - 09/22/2006 by 09/22/2006
- Eddie on another undocumented function - 09/25/2006 by 09/25/2006
- Security Inside - 09/28/2006 by 09/28/2006
- Security professionals at risk from hacking laws - 09/29/2006 by 09/29/2006
Archives
Syndication
Powered by gm-rss 2.0.0
