Oracle Security Handbook

Marlene Theriault (Vienna, VA) has been an Oracle DBA for more than 18 years and has been published in several magazines and conference proceedings throughout the world. She has authored or co-authored several books including Oracle DBA 101, Oracle8i DBA Handbook, and Oracle8i Networking 101. Aaron Newman (Atlanta, GA) currently manages the development of database security solutions at Internet Security Systems, Inc., the world's leading provider of security management systems. He has developed security software not only for Oracle but also for Sybase, Microsoft SQL Server, Windows NT, and Unix. Newman's software has received awards such as the 1999 Editor's Choice Award from Windows NT Magazine. Prior to working for ISS, Newman was President and founder of DbSecure, the company that pioneered the database security assessment market. He has presented database security talks around the country at various security conferences and local user groups and has authored white papers on database security. Steve Vandivler (McLean, VA) has over seventeen years experience in managing projects and contracts with the U.S. Army, the Department of Defense, and commercially. He is President of the Mid-Atlantic Association of Oracle Professionals in the Washington, DC area and is well known in the Oracle User Group Community.

Section I: Beginnings; Ch. 1: Security Architectures; Ch. 2: Oracle's Implementation of These Architectures; Ch. 3: Creating a Security Plan; Section II: Securing the Operating System; Ch. 4: General OS Considerations; Ch. 5: Unix Security; Ch. 6: Windows NT Security/Windows 2000 Security; Ch. 7: Oracle's Use of OS Security; Section III: Securing the Database; Ch. 8: Passwords and Users; Ch. 9: Privileges, Grants, and Roles; Ch. 10: DB Links; Ch. 11: Security and Developer Tools; Section IV: Securing the Network; Ch. 12: Securing Network Options; Ch. 13: Security and the Oracle Advanced Security Option; Ch. 14: Firewalls and Oracle; Ch. 15: Website Security and Portals product; Section V: Hackers and Troubleshooting; Ch. 16: Hacker-Proofing Your System; Ch. 17: Implementing Auditing; Appendix A: Glossary of Terms; Appendix B: Security Risk Assessment Review; Appendix C: Tutorial - Steps to Secure Your Server; Appendix D: New Security Features for Oracle9i