Call: +44 (0)1904 557620 Call

Pete Finnigan's Oracle Security Weblog

This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.

[Previous entry: "SQL Injection, Are Your Web Applications Vulnerable?"] [Next entry: "Oracle XE, where are the security patches?"]

Pete Finnigan's InfoSec 2006 paper How to Secure Oracle in 20 Minutes

I just wanted to post a link to the short talk I did at the InfoSec conference earlier this year (2006) in London. The paper is called "How to Secure Oracle in 20 Minutes" and is quite a nice short paper that makes the point that you cannot secure Oracle in 20 minutes but you can learn that you have a problem in 20 minutes and start to take action. The thing I learned from this is its much easier to hack Oracle than to secure it. Anyone running Oracle should learn this.