| CARVIEW |
By?Marlene Theriault, William Heney
First Edition
October 1998
Pages: 446
ISBN 10: 1-56592-450-9 |
ISBN 13:9781565924505
(Average of 3 Customer Reviews)
This book is OUT OF PRINT, but is available on Safari Books Online.
Book descriptionThis book covers the field of Oracle security from simple to complex. It describes basic RDBMS security features (e.g., passwords, profiles, roles, privileges, synonyms) and includes many practical strategies for securing an Oracle system, developing auditing and backup plans, and using the Oracle Enterprise Manager and Oracle Security Server. Also touches on advanced security features, such as encryption, Trusted Oracle, and Internet and Web protection.
Full Description
- Establishing an organization's security policy and plan
- Protecting system files and passwords
- Controlling access to database objects (tables, views, rows, columns, etc.)
- Building appropriate user profiles, roles, and privileges
- Monitoring system access via audit trails
- Oracle and Security
- Oracle System Files
- Oracle Database Objects
- The Oracle Data Dictionary
- Default Roles and User Accounts
- Profiles, Passwords, and Synonyms
- Developing a Database Security Plan
- Installing and Starting Oracle
- Developing a Simple Security Application
- Developing an Audit Plan
- Developing a Sample Audit Application
- Backing Up and Recovering a Database
- Using the Oracle Enterprise Manager
- Maintaining User Accounts
- Using the Oracle Security Server
- Using the Internet and the Web
- Using Extra-Cost Options
Cover | Table of Contents | Colophon
Featured customer reviews
Oracle Security Review, May 15 2001
Topic is good and needs clear and explanative discussions.
Not enough practical examples for implementing security.
Out of date. This book edition does not cover Oracle 8i, 9i.
Seems it is only addressing up to Oracle 8.0.4 - - isn't that a bit dated????
I would think with a little effort on O'Reilly's part this book can
be updated to be a current and useful tool.
Oracle Security Review, September 21 2000
This is a good reference book. As a new DBA, I have found the material on
developing a database security policy and plan, audit plans, etc. to be very informative.
This book along with Oracle Database Administration: The Essential Reference, is a great reference combination for a new DBA.
Oracle Security Review, August 09 2000
By far the weakest O'Reilly Oracle book I've bought. Good topic, inferior coverage.
The ALTER USER username IDENTIFIED BY VALUES 'encrypted_passwd_string' and PRODUCT_USER_PROFILE mechanisms are better explained in "SQL*Plus: The Definitive Guide" - buy that instead.
About the only valuable part of the book is the table of contents (see what you need to find, then look for it elsewhere), which is found right here on www.oreilly.com (thank you, O'Reilly!).
Puerile and irrelevant analogies ("privilege group is like a treehouse club", "database is like a refrigerator") don't help either. (If that's how Marlene talks to her children, I'm sorry for them.)
Oracle Security Review, July 05 1999
Submitted by Mark Hewitt [Respond | View]
No book is perfect. Write it for one reader and another will complain that it's not for them. However, this book fitted my needs more than adequately.
I needed a quick and easy overview of Oracle Security to start constructing security standards and procedures for my company. I didn't need a full course costing several hundred pounds (UK), just a basic understanding and a quick and dirty overview of the key issues to take to our DBA's for discussion and to add the fine detail.
A few hours with this book (especially the beginner's chapters at the start) and a good mind mapping program gave me the structure, content and understanding necessary to help the DBA's focus on the key issues. This has saved a lot of time for a lot of people where I work.
The book is written for security professionals but does not seem to be promoted as such. A great shame as it is missing a large potential audience not to say misleading a few technical people out there.
Media reviews
"Oracle Security is a book that needed to be written. Oracle has always been known as the most secure database, but many DBAs -- and most developers and managers -- have never implemented strong, flexible security policies in their own databases and applications. When those databases were in controlled corporate environments with limited or nonexistent outside access, that laissez-faire attitude towards security might have sufficed. However, as more and more companies place mission-critical, database-driven applications on the Web, the importance of building secure databases increases exponentially.
"Would you feel safe entering your personal financial information in a web-based application providing the same level of security you built into your last database or application? Probably not. But I'll bet you'll be more comfortable with the security of your next system after you read this book. Here you'll find everything you need to know about security features in Oracle and how they can be used to implement secure and auditable databases and applications." -- Tony Ziemba, Chief Technology Officer, CKO, Inc. and Editor of
Oracle Developer
"Those of us who have attended Marlene's presentations or read her articles know what to expect: a thorough and well-researched effort with a focus on real-world issues. This book provides immediately useful information along with enough background to properly implement the procedures and interpret the results. The book covers not only the technical processes, but also the management and cultural processes needed to effectively implement security. If you have a question regarding any aspect of the implementation of Oracle security, you'll find the answer in this book." -- Kevin Loney, Author of ORACLE8 DBA Handbook
About O'Reilly | Contact | Jobs | Press Room | How to Advertise | Privacy Policy
© 2008, O'Reilly Media, Inc.
All trademarks and registered trademarks appearing on oreilly.com are the property of their respective owners.