Oracle Database 12c: Security
Your database information needs protection suited to its uses. With Oracle, connect access controls and security mechanisms to structure administration. Develop a framework for identifying areas requiring attention and organising checks.
- Duration
- 5 days 35 hours
- Code
- ORA176FR Code
Presentation
Your organisation must meet its information security obligations regarding confidentiality, integrity and compliance with requirements imposed by international, national or sector-specific regulations.
This course explains how to optimise Oracle security features and secure a relational database management system (RDBMS).
You will learn to ensure data confidentiality and integrity, implement access controls for networks, databases and data, perform audits and demonstrate that your RDBMS complies with required security standards.
The course also covers:
- Label-based access control for sensitive data using Oracle Label Security.
- Encryption with Transparent Data Encryption (TDE).
- Managing special user rights and privileges using Oracle Database Vault.
- Creating archives for sensitive data with Flashback Data Archive (FDA).
- Auditing and retaining database activity trails using Oracle Audit Vault.
Participants will apply their learning through practical exercises.
Objectives
- Meet security requirements by implementing and managing Oracle security solutions.
- Control access to data.
- Learn to configure and implement strong authentication measures.
- Discover encryption solutions for protecting stored or archived data and securing information in transit over communications networks.
- Define audit strategies for user actions and database activity.
Program
- Identifying information security requirements.
- Data security.
- Identifying information security risks.
- Detecting security flaws and preventing vulnerabilities.
- Implementing security measures.
- Database security fundamentals.
- Listing database security checkpoints.
- Preparing database administration.
- Physical security.
- Securing networked data.
- Controlling network access.
- Creating, configuring and controlling Oracle Database listener processes.
- Implementing and managing user access.
- Strong or basic authentication.
- Authentication on an Oracle Secure Global Desktop (SGD) server.
- Enterprise User Security (EUS): Oracle's identity management infrastructure.
- Oracle Internet Directory (OID) concepts and architecture.
- Proxy user authentication.
- Administering Oracle user profiles, roles and privileges.
- Relational database schema and relational data model: tables, columns and rows.
- Creating the owner of a virtual private catalogue.
- Oracle Database 12c privilege analysis: workflow and implementation.
- Using application contexts.
- Database access security policies.
- Implementing Virtual Private Database (VPD).
- Implementing Fine-Grained Access Control (FGAC).
- Implementing Oracle Label Security.
- OLS strategies and policies.
- Using Oracle Data Masking.
- Protecting personal data.
- Data masking strategy and process.
- Transparent protection of sensitive data.
- An advanced security option: encryption.
- Protecting data at rest with Transparent Data Encryption (TDE).
- Master keys and key files.
- RMAN and OSB backups.
- RMAN encryption modes.
- Exporting and importing encrypted data through Data Pump.
- Implementing database audits.
- Basic auditing functions.
- Managing unified audits.
- Special auditing situations.
- Fine-Grained Auditing (FGA).
Audience
This course is intended for:
- Database administrators.
- Network administrators.
- System analysts.
- Support engineers.
- Security administrators.
- Security compliance auditors.
Prerequisites
It is also strongly recommended that you know how to:
- Configure and administer Oracle Listener processes.
- Manage users, including creating and maintaining roles and privileges.
- Use RMAN for data backup and recovery.
- Transfer bulk data using Oracle export and import features.
Teaching and assessment methods
- Initial skills assessment
- Training materials provided to participants
- Continuous assessment throughout the course
- End-of-course feedback questionnaire
- Combination of theory and practical application
- Attendance records
- Post-course follow-up evaluation
Dates and sessions
Choose the date and delivery format that suit you.
No upcoming sessions are currently available.
fr
en