Oracle Database Security: Detective Controls Ed 1 Course Overview
In Oracle Security course, you will study on in what way they can custom Oracle Database administration auditing structures to meet the acquiescence necessities of their company. The current regulatory environment wants improved security at the database level. You will also learn how to audit the access to their databases and in what way to use the auditing and compliance structures to monitor data access and discretion. The course offers proposed Oracle solutions for shared problems. Course Objectives: Compute Oracle auditing solutions to monitor database security requirements. Implement Oracle Audit Vault and Oracle Database Firewall. Constitute Oracle Audit Vault and Oracle Database Firewall. Explain Oracle Compliance Framework. Configure elementary Compliance Framework rules.
- Course Objectives and Schedule
- Course Practices and Additional Information
- Auditing Overview
- Unified Audit Management
- Specific Audit Situations
Module 3: Using Fine-Grained Audit
- Comparison with Unified Auditing
- Overview
- FGA Implementation
Module 4: Introduction to Oracle Audit Vault and Database Firewall (AVDF)
- Oracle Audit Vault and Database Firewall Features
- Oracle Audit Vault and Database Firewall Components
- Oracle Audit Vault and Database Firewall Architecture
- Supported Secured Targets
- Integrating Oracle AVDF with Third-party Products
- Oracle AVDF Administrator Tasks
- Oracle AVDF Auditor Tasks
Module 5: Planning the Oracle Audit Vault and Database Firewall Implementation
- Evaluating Oracle AVDF Configuration Requirements
- Configuring Oracle AVDF and Deploying the Audit Vault Agent
- Configuring Oracle AVDF and Deploying the Database Firewall
Module 6: Installing the Audit Vault Server
- Requirements for Installation of Oracle AVDF
- Network Interface Card Requirements
- Installing an Audit Vault Server
- Performing Audit Vault Server Post-Installation Tasks
Module 7: Configuring the Audit Vault Server
- Specifying the Server Date and Time
- Setting or Changing the Audit Vault Server Network Settings
- Configuring or Changing the Audit Vault Server Service
- Configuring the Audit Vault Server Syslog Destinations
- Defining Datafile Archiving Locations
- Creating Archiving Policies
- Configuring the Email Notification Service
- Configuring Administrative Accounts for the Audit Vault Server
Module 8: Configuring Oracle AVDF and Deploying the Audit Vault Agent
- Understanding Network Requirements for AV Server and AV Agent
- Registering Hosts in the Audit Vault Server
- Deploying and Activating the Audit Vault Agent on Host Computers
- Registering the Audit Vault Agent as a Windows Service
- Creating User Accounts for Oracle AVDF
- Registering Secured Targets
- Configuring Audit Trails for Secured Targets
- Configuring Stored Procedure Auditing
Module 9: Networking and Oracle AVDF
- Overview of the OSI 7-level Network Model
- Overview of IPv4 Addressing and Routing
- Overview of MAC Addressing
- Overview of Virtual LANs (VLANs)
- Overview of Spanning Tree Protocol (STP)
- Oracle AVDF Deployment Models (inline, out of band, and proxy)
- Best Practices for Database Policy Enforcement (DPE) and Database Activity Monitoring (DAM) Modes
Module 10: Installing a Database Firewall
- Requirements for Installation of a Database Firewall
- Network Interface Card (NIC) Requirements
- Installing a Database Firewall
- Performing Database Firewall Post-Installation Tasks
Module 11: Configuring Oracle AVDF and Deploying Database Firewall
- Configuring Basic Settings for Database Firewall
- Configuring a Database Firewall on Your Network
- Associating a Database Firewall with the Audit Vault Server
- Registering Secured Targets
- Configuring Enforcement Points
- Configuring and Using Database Interrogation
- Configuring and Using Database Response Monitoring
Module 12: Using Host Monitoring
- Overview of Host Monitoring
- Installing and Enabling Host Monitoring
- Checking the Status of the Host Monitor
- Stopping the Host Monitor
Module 13: Configuring High Availability
- Overview of Oracle AVDF High Availability Architecture (resilient pairs)
- Configuring a Resilient Pair of Audit Vault Servers
- Configuring a Resilient Pair of Database Firewalls
Module 14: Creating Custom Collection Plug-ins
- Overview of Audit Collection Plug-ins
- General Procedure for Writing Audit Collection Plug-ins
- Setting Up Your Development Environment (downloading the SDK)
- Creating Audit Collection Plug-ins
- Packaging Audit Collection Plug-ins
Module 15: Managing the Audit Vault Server
- Starting an Archive Job
- Restoring Audit Data
- Monitoring Jobs
Module 16: Managing the Database Firewalls
- Viewing and Capturing Network Traffic in a Database Firewall
- Viewing the Status and Diagnostics Report for a Database Firewall
- Removing a Database Firewall from the Audit Vault Server
Module 17: Overview of the Auditing and Reporting Features
- Overview of Database Firewall Policies
- Overview of Oracle Database Audit Policies
- Overview of Reports and Report Schedules
- Overview of Oracle Database Entitlement Auditing
- Overview of Oracle Database Stored Procedure Auditing
- Overview of Alerts and Email Notifications
Module 18: Performing Administrative Tasks
- Viewing a List of Audit Trails and Audit Trail Status
- Viewing a List of Enforcement Points and Enforcement Point Status
- Specifying a Data Retention Policy
- Creating Secured Target Groups
- Assigning a Secured Target to a Compliance Group
- Managing User Accounts and Access
- Creating Templates and Distribution Lists for Email Notifications
- Monitoring Jobs
Module 19: Creating Audit Policies for Oracle Databases
- Overview of Audit Policies and Audit Data Collection
- Overview of Oracle Database Auditing
- Recommended Audit Settings
- Creating Audit Polices for Oracle Database (overview)
- Retrieving and Modifying Audit Settings from an Oracle Database
- Creating Additional Audit Policy Settings for an Oracle Database
Module 20: Creating Database Firewall Policies
- Overview of Database Firewall Policies
- Creating a Firewall Policy
- Defining Firewall Policy Rules and Settings
- Using Profiles to Customize a Firewall Policy
- Publishing Firewall Policies
- Deploying Firewall Policies to Secured Targets
Module 21: Oracle AVDF Reports
- Using the Built-in Reports
- Managing Reports
- Customizing Built-in Reports
- Creating Custom Reports
Module 22: Managing Entitlements
- Overview of Entitlement Data (what is it?)
- Retrieving Entitlement Data from an Oracle Database (creating a snapshot)
- Creating Labels for Snapshots
- Assigning Labels to Snapshots
- Using Entitlement Reports