I will show you in the next few minutes how you can learn to find security vulnerabilities in your PL/SQL code
Even if the database that your PL/SQL is deployed to is secure then if you do not program your PL/SQL defensively and securely then it is a matter of when and not if that a breach of your customer or employers data could occur through non-secure PL/SQL applications.
If you are not aware of what security issues in PL/SQL look like and how they could be exploited then it is not easy for you to code your PL/SQL securely. How would you feel if it was your lack of knowledge that caused a data breach to occur?
We have an easy solution for you. We are running two live training events online on the 27th March 2024 on UK hours and the same class is re-run on the 28th March 2024 but this is on USA EST time zones. Some highlights of the class next:
- The classes are taught by Pete Finnigan live but on-line via webex so you do not need to leave your office or home to attend.
- You can ask questions at any time during the class day and get access to Pete and learn from him and his over 20 years of experience in this field of secure coding in PL/SQL.
- The class is one day and is called Secure Coding in PL/SQL and is taught live from 9am to 5pm. The class includes taught lessons and many demonstrations throughout the day.
- Each student will receive pdfs of full course notes and lessons and also over 100 free SQL and PL/SQL scripts and tools covering the demonstrations and also the many free tools used in the class.
- You do not need to be a PL/SQL developer to attend although most attendees are usually PL/SQL developers. We have also taught DBA staff and even managers who would like to understand the security risks likely to be found in PL/SQL their developers create.
- The high level agenda is as follows:
- Data Theft: This lesson covers why data can be stolen or privilege escalated in a
database focusing on issues related to privileges assigned to PL/SQL, bad
programming practices and leakage of data. This section is an overview to allow the student to see how PL/SQL fits into
the security model intended to protect Data - Permissions: We cover permissions of packages and procedures and design decisions that affect security
- Coding Errors: This section introduces common PL/SQL Security programming issues and
for each shows the issue in code form and exploitation and then also in terms
of secure coding and solution. These include: Input validation, Object validation, Open interfaces, SQL and PL/SQL and Other Injection issues, File and external access, Operating system commands, Vulnerable and dangerous package use and more - Secure Coding Best Practice: We look at fixing the issues and secure coding best practice
- Encryption: We use encryption as an example to demonstrate everything we have covered so far
- Protecting PL/SQL: This section discusses techniques to lock down PL/SQL in terms of Preventing IPR loss, Prevent unauthorised execution both in the host database or if the code is removed, License type features and wrapping and unwrapping
- Finishing Up: We cover processes to secure code and review coding and also automated checking of your code and finally creating secure coding policies
- Data Theft: This lesson covers why data can be stolen or privilege escalated in a
The course material and demonstrations have recently been extensively updated and cover up to Oracle version 23c. Of course all earlier versions are also covered.
The course fee is just £440 GBP (plus VAT if applicable).
To register your place on our class then simply send an email to securecode@petefinnigan.com and we will help you secure your place
As a bonus if you book more than one place we will include a 10% discount for all places booked by you.
Your PL/SQL code will be more secure after this class so please register your place now.
To register your place on our class then simply send an email to securecode@petefinnigan.com and we will help you secure your place
#oracleace #sym_42 #oracle #plsql #secure #coding #training
