Safe Harbor Statement

Size: px

Start display at page:

Download "Safe Harbor Statement"

Laurence Barnett
8 years ago
Views:

2 Safe Harbor Statement The following is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described for Oracle s products remains at the sole discretion of Oracle. Copyright 2014 Oracle and/or its affiliates. All rights reserved. Oracle Public 2

3 Inovação na Saúde Forum 2015 Infraestruturas Cloud e Segurança SECURITY Inside-Out Vítor Gomes Security Consultant Oracle

MEGA BREACHES THE PAST 12 MONTHS 200M Credit Bureau Mar 14 150M + Code HiTech Oct 13 56M Retailer Sep 14 98M Retailer DEC 13 150M ecommerce May 14 76M Fin Svcs Oct 14 Telecom OCT 13 2M SA Banks OCT

4 MEGA BREACHES THE PAST 12 MONTHS 200M Credit Bureau Mar M + Code HiTech Oct 13 56M Retailer Sep 14 98M Retailer DEC M ecommerce May 14 76M Fin Svcs Oct 14 Telecom OCT 13 2M SA Banks OCT 13 20M Credit Bureau 12M Telecom Jan 14 22M Education July 14 Immigration June 14 Credit Cards Personal Records Copyright Copyright 2014, Oracle 2014 Oracle and/or and/or its affiliates. its affiliates. All rights All rights reserved. reserved. Oracle Public 4

Cost per Record for Data Breach Per Capita Cost ($) by Industry Classification Healthcare Education Pharmaceutical Financial Communications Industrial Consumer Services Technology Energy

5 Cost per Record for Data Breach Per Capita Cost ($) by Industry Classification Healthcare Education Pharmaceutical Financial Communications Industrial Consumer Services Technology Energy Media Hospitality Transportation Research Retail Public Sector Source: Ponemon Institute 2014 Cost of Data Breach Study Copyright 2014, Oracle and/or its affiliates. All rights reserved. 5

Network Security Vulnerability Management OF RECORDS BREACHED FROM DATABASES Email Security at the CORE is End point

6 Network Security Vulnerability Management OF RECORDS BREACHED FROM DATABASES Security at the CORE is End point Security your Source: Verizon Data Breach Report 2012 Copyright 2014, Oracle and/or its affiliates. All rights reserved. 6

PREVENTIVE DATABASE SECURITY DETECTIVE STRATEGY ADMINISTRATIVE Copyright

PREVENTIVE SECURITY CONTROLS Users Data Redaction ssn:xxx-xx-4321 dob:xx/xx/xxxx Applications DB Controls Dev/Test Partners, BI Privileged Users Access denied Insufficient Privilege Key Vault Data

8 PREVENTIVE SECURITY CONTROLS Users Data Redaction ssn:xxx-xx-4321 dob:xx/xx/xxxx Applications DB Controls Dev/Test Partners, BI Privileged Users Access denied Insufficient Privilege Key Vault Data Encryption Data Subsetting Region, Year Size-based Data Masking ssn: dob: 12/01/1987 Copyright 2014, Oracle and/or its affiliates. All rights reserved. Oracle Public 8

9 DETECTIVE SECURITY CONTROLS Database Firewall Users! SYBASE Applications Network Events Audit Data Alerts! Reports Policies Audit Vault Audit Data, Event Logs Custom Copyright 2014, Oracle and/or its affiliates. All rights reserved. Oracle Public 9

11 ORACLE CONTROLS PREVENTIVE DETECTIVE ADMINISTRATIVE Encryption & Redaction Activity Monitoring Key Management Masking & Subsetting Database Firewall Privilege & Data Discovery DBA & Operational Controls Auditing & Reporting Configuration Management Copyright 2014, Oracle and/or its affiliates. All rights reserved. Oracle Public 11

12 MAP SECURITY CONTROLS TO DATA Across the organization STANDARD CONFIGURATIONS SECURITY ROADMAP Planning and management Benefits Higher security at lower cost SIMPLIFIED SECURITY SECURITY CONTROLS Aligned with the value of data Copyright 2014, Oracle and/or its affiliates. All rights reserved. Oracle Public 12

13 ORACLE DATABASE SECURITY STRATEGY SECURITY INSIDE OUT Security close to the data. Maximize performance with application transparency. DEFENSE IN DEPTH Layered overlapping controls: Encryption, audit, monitoring, access control, masking, redaction, SECURE DEPLOYMENTS Across multiple systems: operating systems, heterogeneous databases, applications, CONTINUOUS INNOVATIONS Virtual Private Databases, Transparent Data Encryption, DBA Control, Data Redaction, Privilege Analysis, Database Firewall, Real Application Security,. Copyright 2014, Oracle and/or its affiliates. All rights reserved. Oracle Public 13

14 CONNECT WITH US /OracleDatabase /OracleSecurity blogs.oracle.com/ SecurityInsideOut Oracle Database Insider /Oracle/database oracle.com/database/security oracle.com/technetwork/database/security Copyright 2014 Oracle and/or its affiliates. All rights reserved. 14

Forthcoming EU Data Protection Law

Forthcoming EU Data Protection Law How Oracle can Help Patrick McLaughlin Security Architect & Oracle Fellow EMEA Technology Solutions 22 October 2015, Riga Copyright 2014 Oracle and/or its affiliates.