| |
 |
|
Oracle Tips by Burleson |
Chapter 3 Introduction
to Oracle Auditing
ORA-01017: invalid username/password; logon denied 2
Note the error encountered: "ORA-02289:
sequence does not exist". This simply indicates that a user tried to
select a sequence for which they were unauthorized. Most likely it
is due to the user mistyping the name of the sequence, but it could
be the result of someone trying to access the sequence without
knowing the name, potentially a malicious attempt. An analysis of
the audit report will help to identify the attacker.
In Chapter 9 on Trigger Auditing, detailed
scripts will be provided to accomplish this.
Always audit any errors encountered by the
Oracle server.
Program Source Auditing
Most auditing requirements deal with data
changes or structural changes. However, in most cases the data
changes occur inside a code segment such as a stored procedure. The
audit data indicates that a user executed the procedure - but what
if the logic inside the procedure is changed? This is a very common
incident. Stored programs can change, either knowingly or
unknowingly, and affect data changes, but the changes are difficult
to track. Therefore, there is a need to record any changes to these
program sources, too.
HIPAA rules mandate that
any changes in the execution of code that can potentially change the
way data is manipulated be tracked. This means that all the code,
including the code outside the database, should be subjected to
audit. The code outside the database, such
The above text is
an excerpt from:
Oracle Privacy Security Auditing
The
Final Word on Oracle Security
This is the only authoritative
book on Oracle Security, Oracle Privacy, and Oracle Auditing written
by two of the world’s leading Oracle Security experts.
This indispensable book is only $39.95 and has an
immediate download of working security scripts:
http://rampant-books.com/book_2003_2_audit.htm
 |
For more details and scripts, see my new book "
Oracle
Tuning: The Definitive Reference", over 900 pages
of BC's favorite tuning tips & scripts.
You can buy it direct from the publisher for 30%-off and get
instant access to the code depot. |
|
