Oracle数据库安全及合规遵循解决方案.ppt

* * * * A commonly overlooked security feature available with Oracle Enterprise Manager configuration pack is Secure Configuration Scanning. Maintaining a secure configuration is vital to the overall security of the database. Oracle Enterprise Manager configuration pack provides over 200 built-in best practices for maintaining a secure environment. Here you can see the easy graphs and charts provided that enable you to easily spot any issues early. Secerno * Oracle Confidential * * Oracle Database Firewall provides a Next Generation technology for securing and protecting data in databases. Database Firewall uses a very different approach, which offers greater levels of automation, simplicity and security than traditionally data security software vendors. The core technology interprets the grammar of SQL and works by analyzing the meaning of the statements that database clients issue. This approach provides a significantly higher degree of protection than traditional first-generation database monitoring technology since it is not dependent on the source of an attack or on recognizing the syntax of known security threats. Oracle Database Firewall technology easily recognizes injected SQL and can block attempted attacks that are out of an organizations security policy. The technology is so accurate in understanding the meaning of the SQL transaction that false positives and false negatives are a thing of the past. Database Firewall is designed to work on the network, providing in-line security or out-of-band monitoring for the largest of enterprise deployment. Optional host-based agents provide low-impact local monitoring capabilities. * * * * * * * * * * * * * * * * * * * * * * * * * * * Q:表空间加密与基于字段的加密在开销上有何区别？ A：表空间加密不会增加存储开销。而基于字段的加密将需要额外的空间，取决与数据分布等特点不一。 * * 描述与BFILE 的对比，着重存储在文件系统或数据外部不安全 * * Note this shows Secure File performance relative to native file system. The SecureFile objects were not encrypted for an apple-to-apple comparison. However our initi