I spoke at the UKOUG UNIX SIG in London yesterday (22nd January 2008) about Using VPD in the real world. The talk focused on the fact that VPD is not a standalone solution and is ideally used as one component of an overall security solution. Also the paper covered the issues surrounding securing VPD itself to prevent bypass of its features and inevitably access to the data and also issues with alteration to VPD setup. The paper also covered some of the features of VPD, performance and some guidelines on implementing it.
The paper is available with one slide per page and also with six slides per page. Both are pdf files. The papers are available as usual from my Oracle security white papers page
Blog
Pete Finnigan's Oracle Security Weblog
This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.
[Previous entry: "UKOUG Unix SIG 22nd Jan and more"] [Next entry: "Orablogs is no more (well soon)"]
January 2008
- Happy New Year and an example of having your bank account compromised - 01/07/2008 by 01/07/2008
- Why does the parameter count change - 01/08/2008 by 01/08/2008
- Sentrigo release a study of how many people apply a CPU - 01/14/2008 by 01/14/2008
- Oracle release the January 2008 CPU patch - 01/16/2008 by 01/16/2008
- UKOUG Unix SIG 22nd Jan and more - 01/21/2008 by 01/21/2008
- Pete Finnigan; new VPD in the real world paper available - 01/23/2008 by 01/23/2008
- Orablogs is no more (well soon) - 01/24/2008 by 01/24/2008
- Review of the book Practical Oracle Security - 01/28/2008 by 01/28/2008
- PeteFinnigan.com Limited Advisory for the Oracle Jan 2008 CPU - 01/30/2008 by 01/30/2008
Archives
Syndication
Powered by gm-rss 2.0.0
