Oracle Security

Oracle Security provides complex solutions that protect your data from unauthorized access.

Majority of security breaches come from within an organization. That‘s why application data also must be guarded against access by the insiders – especially highly privileged users. Oracle Database Vault is the first and only privileged database access control solution. It uses separation of duty and flexible control access policies: realms for application; factors, command rules for database. This way application, database and data are complexly protected. To use this solution no changes are needed to the existing applications.

Oracle Label Security is another data security solution that complements database roles and privileges. It is a transparent access control that applies data classification labels to data rows, reflecting multi-level securities. For example, user accesses only those records which numeric label values are smaller than his/her defined privilege.

Finally, Oracle Advanced Security combines Transparent Data Encryption, Network Encryption and Strong Authentication.

The Transparent Data Encryption is done at column and table space level. Data is automatically encrypted when it is written to disk and automatically decrypted when accessed by the application. Key management is built-in, applications do not have to be modified, and existing applications will continue to work without modifications.

When information travels to and from the database it may be encrypted by number of standards. Network Encryption supports both industry standard Secure Sockets Layer (SSL) encryption and the Oracle native encryption capability.

Strong Authentication expands the standard data access procedure based on something that user knows (a PIN or pass code) by something that user must have (a smart card, token etc.)