SlideServe
Menu
Préférences
© SlideServe · v2026

An investigation into the security features offered by Oracle 10g Enterprise Edition

kay avatar
12 diapositives · 307 Views · Oct 08, 2014

An investigation into the security features offered by Oracle 10g Enterprise Edition. Author: Keletso Nyathi Supervisor: Mr John Ebden Computer Science Department. Project objectives. To study and evaluate the security features on the 10g Enterprise Edition of Oracle

An investigation into the security features offered by Oracle 10g Enterprise Edition - slide 1
01 / 12An investigation into the security features offered by Oracle 10g Enterprise Edition
1 / 17

Télécharger la présentation

An investigation into the security features offered by Oracle 10g Enterprise Edition
Une image / un lien ci-dessous est fourni (tel quel) pour télécharger la présentation

Politique de téléchargement : le contenu du site vous est fourni TEL QUEL pour votre information et votre usage personnel ; il ne peut être vendu, concédé sous licence ni partagé sur d’autres sites sans l’accord de son auteur.Le contenu vous est fourni TEL QUEL, pour votre information et votre usage personnel uniquement. Téléchargez la présentation en cliquant sur ce lien. Lors du téléchargement, si vous ne parvenez pas à télécharger une présentation, l’éditeur a peut-être supprimé le fichier de son serveur.Pendant le téléchargement, si vous ne parvenez pas à obtenir une présentation, le fichier a peut-être été supprimé par l’éditeur.

F I N

Plus de contenu associé

Transcription de la présentation
  1. An investigation into the security features offered by Oracle 10g Enterprise Edition Author: Keletso Nyathi Supervisor: Mr John Ebden Computer Science Department

  2. Project objectives • To study and evaluate the security features on the 10g Enterprise Edition of Oracle • To draw out a conclusion about how secure Oracle databases are. • To suggest possible solutions to database security problems.

  3. Introduction • A database is an integrated aggregation of data usually organised to reflect logical or functional relationships among data elements. • Databases have to be protected from illegal users. • Poor database security is a lead contributor to incidents of identity theft. • My project aims at evaluating the security provided by databases against hackers and trying to come up with possible solutions.

  4. Background Information • Databases have been made available on the Internet to provide fast querying by users. • The growth of e-commerce has led to increased risks of indirect attack on databases. • Recently David Litchfield claims to have found a new class of attack on Oracle called “Dangling Cursor snarfing” that he uses to hack into the system. • Meanwhile Oracle claims that this class of attack is trivial and highly impractical.

  5. Oracle Database current releases

  6. Cont…

  7. Cont…

  8. Literature Survey. • A paper by David Litchfield entitled “Dangling Cursor Snarfing: A new class of Attack in Oracle”. • Another paper by David Litchfield entitled “Which Database is more secure? Oracle vs. Microsoft”. • Security course offered by Barry Irwin. • Documentation from Oracle about its security. • Database security as well as hacking techniques from the Internet. • Projects from previous years.

  9. Intended Approach • Investigate David Litchfield’s claim against Oracle Database • Investigate some of the security features claimed by Oracle. • For each security feature, I will carry out tests to hack into the database. • Record findings and try to come up with possible solutions in case of failure. • Finally evaluate my findings and draw out a conclusion about the overall security offered by Oracle.

  10. Timeline

  11. Expected outcomes and possible extensions • Derive a conclusion about how secure Oracle is. • If possible, make informed security suggestions for databases. • Acquire a deep understanding of the weaknesses in database security ………………………………………………………………………………………………… • This project can also be carried forward into comparing Oracle against other databases e.g. SQL Server and some open source databases. • Its results might be a clue into finding an effective way to improve database security.

  12. Thank you Questions and answers