OracleForensics.com is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more.

Three Tier Oracle Security in London ~ Paul M. Wright » Catchup

Catchup

It's been a while since I've written a blog post, but I wanted to catch up on some recent developments. Recently,Oracle released Audit Vault, which is a great tool for auditing your database activity. However, be sure to read the trial license carefully before using it, as it only allows you to use the product for 30 days. Additionally, Oracle Forensics released a live response paper by David that includes some code that could give a DBA a nasty surprise on reboot. The paper extends the idea of creating a checksum profile that can be stored and compared at a later time. Checksums for Java Byte code can be made using the code in the paper. Additionally, David pays reference to a commercial unwrapping tool that can be used to decrypt Oracle wallets.

Not been blogging for a while due to being busy at work. In the meantime there has been the following.
1.Oracle Audit Vault released by Oracle, but don’t forget to read the trial license…and that goes with many “free” Oracle products interestingly (30 days IOW).
2. Oracle Forensics Live response paper by David. Starts with code that could give the DBA a nasty surprise on reboot. Extends the idea of creating a checksum profile that can be stored and compared at a later time. Checksums for Java Byte code can be made using code in the paper. Additionally David pays reference to a commercial unwrapper for PLSQL. Unwrappers have been around for a while. In order to be forensically sure of a piece of codes effect then the source code needs to be read so an unwrapper will have many positive uses.
3. http://www.ukoug.co.uk/calendar/show_event.jsp?id=2861
is an interesting SIG meeting with a security flavour, though the contents of Pete’s presentation are already online. Professor Carl Dudley’s presentation on TDE is also worth making a journey for.
4. David is giving a very interesting talk at AusCERT. Wish I was there and not just for the sun… as this presentation looks like the current “whats hot”. http://conference.auscert.org.au/conf2007/presentation.php#presentation_TP_04

On a personal side note. If anyone watched the BEEB documentory on Hendrix…small correction needs to be added. Hendrix’s output did not go down hill after Woodstock as Band of Gypsys album which is his most critically acclaimed album by many officianados was on New Years AFTER woodstock.

Also his influences were largely US soul not the brit pop of the time as the documentary suggest.

http://www.earlyhendrix.com/disco/confir.htm

For a much better Hendrix documentary I recommend “Jimi Hendrix” http://www.imdb.com/title/tt0070242/

5
1 ratings