Oracle Database Security: Detective Controls

1. Introduction

• Introduction
• Practice 1-1: Environment Familiarization

2. Types of Auditing

• Types of Auditing
• Security: Roles
• Practice 2-1 Enabling Unified Auditing
• Practice 2-2: Creating and Enabling Audit Policies? Part 1
• Practice 2-2: Creating and Enabling Audit Policies? Part 2
• Practice 2-3: Cleaning Up Audit Policies and Data
• Practice 2-4: Auditing SYS User (Optional)
• Practice 2-5: Auditing Data Pump Export (Optional)?.Part
• Practice 2-5: Auditing Data Pump Export (Optional)? Part
• Practice 2-6: Auditing RMAN Backups

3. Using Fine-Grained Audit

• Using Fine-Grained Audit
• Practice 3-1: Implementing Fine-Grained Auditing
• Practice 3-2: Viewing the FGA Trail
• Practice 3-3: Using an Event Handler

4. Introduction to Oracle Audit Vault and Database Firewall

• Introduction to Oracle Audit Vault and Database Firewall
• Practice 4-1: Identifying Audit Vault and Database Firewall Components
• Practice 4-2: Identifying Supported Secured Targets
• Practice 4-3: Identifying Third-Party Product Integration
• Practice 4-4: Distinguishing Typical Tasks of Oracle AVDF Administrators and Auditors

5. Planning the Oracle Audit Vault and Database Firewall Implementation

• Planning the Oracle Audit Vault and Database Firewall Implementation
• Practice 5-1: Implementing Oracle AVDF
• Practice 5-2: Configuring Oracle AVDF and Deploying the Audit Vault Agent
• Practice 5-3: Configuring Oracle AVDF and Deploying the Database Firewall

6.Installing the Audit Vault Server

• Installing the Audit Vault Server
• Practice 6-1: Performing Audit Vault Server Post- Installation Tasks

7. Configuring the Audit Vault Server

• Configuring the Audit Vault Server
• Practice 7-1: Creating Audit Vault Server Administrative Users
• Practice 7-2: Verifying the Server Date and Time Settings
• Practice 7-3: Verifying the Audit Vault Server Network Configuration
• Practice 7-4: Verifying the Audit Vault Server Services
• Practice 7-5: Configuring syslog Messages
• Practice 7-6: Defining an Archiving Location
• Practice 7-7: Creating Archive Policies

8. Configuring Oracle AVDF and Deploying the Audit Vault Agent

• Configuring Oracle AVDF and Deploying the Audit Vault Agent
• Practice 8-1: Registering the Host
• Practice 8-2: Deploying the Audit Vault Agent on the Host
• Practice 8-3: Activating the Audit Vault Agent
• Practice 8-4: Creating User Accounts on the Secured Target
• Practice 8-5: Registering the Secured Target
• Practice 8-6: Configuring an Audit Trail for the Secured Target
• Practice 8-7: Configuring Stored Procedure Auditing

9. OSI Seven-Layer Network Model: Overview

• OSI Seven-Layer Network Model: Overview
• Networking and Oracle AVDF
• OSI Networking Model Layer 5, 6, 7, Proxy, Firewall, Protection Techniques
• AVDF Supported Protocols
• Practice 9-1: Configuring Database Firewall
• Practice 9-2: Using Network Diagnostic Tools

10. Installing a Database Firewall

• Installing a Database Firewall
• Practice 10-1: Performing Database Firewall Post- Installation Tasks

11. Configuring Oracle AVDF and Deploying Database Firewall

• Configuring Oracle AVDF and Deploying Database Firewall
• Practice 11-1: Verifying the Database Firewall’s Network Settings
• Practice 11-2: Verifying the Database Firewall’s Network Services
• Practice 11-3: Verifying the Traffic Source Configuration
• Practice 11-4: Configuring a Database Firewall as a Traffic Proxy
• Practice 11-5: Specifying the Audit Vault Server Certificate and IP Address
• Practice 11-6: Registering the Database Firewall
• Practice 11-7: Registering the Secured Targets in the Audit Vault Server
• Practice 11-8: Creating and Configuring Enforcement Points
• Practice 11-9: Configuring Database Response Monitoring

12. Using Host Monitoring

• Using Host Monitoring
• Practice 12-1: Reviewing Sample Configurations for Host Monitoring Implementation
• Practice 12-2: Installing the Host Monitor
• Practice 12-3: Configuring an Audit Trail for Host Monitoring
• Practice 12-4: Starting the Host Monitor

13. Configuring High Availability

• Configuring High Availability
• Practice 13-1: Listing the Steps to Configure a Resilient Pair of Audit Vault Servers
• Practice 13-2: Listing the Steps to Configure a Resilient Pair of Database Firewalls

14. Creating Custom Collection Plug-ins

• Creating Custom Collection Plug-ins
• Practice 14-1: Identifying the Need for a Custom Collection Plug-in
• Practice 14-2: Identifying Database Table Collection Plug- in Requirements
• Practice 14-3: Identifying XML File Collection Plug-in Requirements
• Practice 14-4: Listing the Steps to Create a Custom Collection Plug-in

15. Managing the Audit Vault Server

• Managing the Audit Vault Server
• Practice 15-1: Verifying an Archived Location Definition
• Practice 15-2: Starting an Archive Job
• Practice 15-3: Restoring Archived Datafiles

16. Managing the Database Firewall

• Managing the Database Firewall
• Practice 16-1: Viewing Live Network Traffic
• Practice 16-2: Capturing Network Traffic
• Practice 16-3: Viewing the Database Firewall Status Report
• Practice 16-4: Viewing a Database Firewall Diagnostic Report

17. Overview of the Auditing and Reporting Features

• Overview of the Auditing and Reporting Features
• Practice 17-1: Identifying Steps to Create an Audit Policy
• Practice 17-2: Viewing the Auditor’s Dashboard
• Practice 17-3: Determining Whether Built-in Reports Satisfy Requirements

18. Performing Administrative Tasks

• Performing Administrative Tasks
• Practice 18-1: Using Secured Target Groups
• Practice 18-2: Monitoring a Job
• Practice 18-3: Creating Auditor Accounts
• Practice 18-4: Granting Access to a Secured Target
• Practice 18-5: Viewing Audit Trails
• Practice 18-6: Viewing Enforcement Points
• Practice 18-7: Specifying a Data Retention Policy
• Practice 18-8: Creating an Email Distribution List
• Practice 18-9: Creating an Email Template

19. Audit Policies and Audit Data Collection: Overview

• Audit Policies and Audit Data Collection: Overview
• Oracle Database Traditional Auditing: Overview
• Practice 19-1: Retrieving Audit Settings from an Oracle Database
• Practice 19-2: Creating Audit Policy Settings
• Practice 19-3: Provisioning Audit Policies

20. Creating Database Firewall Policies

• Creating Database Firewall Policies
• Practice 20-1: Creating and Publishing a Basic Capture Firewall Policy
• Practice 20-2: Enabling the Basic Capture Firewall Policy
• Practice 20-3: Capturing SQL
• Practice 20-4: Performing a SQL Injection Attack on the HR Application
• Practice 20-5: Blocking a SQL Injection Attack on the Employees Phone Lookup Application
• Practice 20-6: Modifying and Publishing the Firewall Policy

21. Oracle AVDF Reports

• Oracle AVDF Reports
• Practice 21-1: Viewing Audit Reports
• Practice 21-2: Customizing Reports
• Practice 21-3: Viewing Compliance Reports
• Practice 21-4: Viewing Firewall Reports
• Practice 21-5: Creating and Scheduling PDF Reports
• Practice 21-6: Annotating and Attesting Reports

22. Managing Entitlements

• Managing Entitlements
• Practice 22-1: Creating a Snapshot
• Practice 22-2: Creating Database Users and Granting Roles
• Practice 22-3: Creating a Second Snapshot
• Practice 22-4: Viewing a User Entitlement Report

23. Creating Alerts

• Creating Alerts
• Practice 23-1: Creating an Alert
• Practice 23-2: Viewing the Triggered Alert
• Practice 23-3: Updating the Alert Status
• Practice 23-4: Viewing the Alert Report
• Practice 23-5: Scheduling an Alert Report

24. Introduction to Compliance

• Introduction to Compliance
• Practice 24-1: Reviewing Compliance Terminology

25. Compliance for Databases

• Compliance for Databases
• Practice 25-1: Changing Passwords for SYS and SYSTEM
• Practice 25-2: Locking, Expiring, and Changing Passwords for Default or Unused Accounts
• Practice 25-3: Restricting Access to Oracle Home and Installation Files
• Practice 25-5: Revoking Privileges from PUBLIC WhereNot Necessary
• Practice 25-6: Protecting the Data Dictionary from Unauthorized Users
• Practice 25-7: Setting Security-Related Parameters to Their Recommended Values
• Practice 25-8: Protecting Listener and Network Connections
• Practice 25-9: Protecting the Database Host

26. Customizing Rules for Your Database

• Customizing Rules for Your Database
• Practice 26-1: Creating a Configuration Extension
• Practice 26-2: Creating an Agent-Side Compliance Standard Rule
• Practice 26-3: Creating a Manual Rule
• Practice 26-4: Creating a Compliance Standard
• Practice 26-5: Associating the Compliance Standard to a Target
• Practice 26-6: Suppressing Violations
• Practice 26-7: Clearing Violations

27. Enterprise Manager Command Line Interface (EMCLI)

• Enterprise Manager Command Line Interface (EMCLI)
• Practice 27-1: EMCLI Compliance-Related Verbs