Oracle Database Security and Audit

Transcription

1 Copyright 2014, Oracle Database Security and Beyond Checklists Learning objectives Understand data flow through an Oracle database instance Copyright 2014, Why is data flow important? Data is not static within an Oracle database instance The data dictionary is composed of Fixed tables Dynamic views These structures expose data at all points throughout the system Copyright 2014,

2 Copyright 2014, in Oracle database Where is the data? In a table - right? The User Enters some data in an application interface Copyright 2014, The data is turned into SQL Copyright 2014,

3 Copyright 2014, The data is inserted into the database table perhaps also updating indexes Is the data just in the table? (CREDIT_CARD in this case) Copyright 2014, No! Copyright 2014,

4 Copyright 2014, The SQL Statement is parsed The data blocks required are and the SQL, data binds are written to shared memory (either written into the shared fetched for reads or created for memory This is accessible writes if necessary) through many dictionary views The data is in the if sorts are in memory (sometimes in the ) Copyright 2014, The data is also held on disk in files (use strings (UNIX) or hex dumps to read) table data and index data; also internal dumps Copyright 2014,

5 Copyright 2014, Redo is generated in memory on disk are generated in memory on disk Copyright 2014, Undo segments are generated in memory on disk Copyright 2014,

6 Copyright 2014, orary tablespaces can also contain the data Flash back contains the data in memory on disk Copyright 2014, trails can contain the data (because these can be written as SQL all of the above are duplicated!!) Copyright 2014,

7 Copyright 2014, Log files generated by the database server can contain data Oracle allows a huge amount of trace to be generated 10046, 10053, 10925, dumps, events Copyright 2014, At all stages within the database, this data is exposed in the data dictionary via static views or dynamic views Copyright 2014,

8 Copyright 2014, Backups remove data from the database to tape to disk Backups, exports, etc. Disaster recovery Data sent in real / semi-real time to standby Backups, exports, etc. Copyright 2014, At all stages outside the database, the data is exposed - on the network, operating system, or backup devices. Disaster recovery Backups, exports, etc. Copyright 2014,

9 Copyright 2014, Q&A