Re: Firewalls, App Servers and Oracle databases

From: Paul Drake <discgolfdba_at_yahoo.com>
Date: Thu, 1 Apr 2004 15:42:07 -0800 (PST)
Message-ID: <20040401234207.53180.qmail@web20414.mail.yahoo.com>

Ben <poelsb_at_post.queensu.ca> wrote:
> Hi

> Are there any documents or books anyone can
> recommend that discuss how
> best to handle security in such an environment.

> Thanks,

> Ben

Ben,

Part I. Pete Finnigan.
I'll save Pete the trouble of plugging his book (which I would highly recommmend).
https://store.sans.org/store_item.php?item=80

I'm glad that I picked up a copy early on. It sometimes lacks practical methods in which to implement the recommendations. Metalink has some docs on securing components.
I'd survey the papers up on his site:
http://www.petefinnigan.com/orasec.htm

If the network and the operating systems aren't secured, you're largely wasting your time securing the database. Check out the SANS site for papers and texts regarding OS security.

Part II. Aaron Newman
Aaron recently presented at NYOUG (last week). His presentation is not yet available up on the NYOUG website (http://www.nyoug.org) but at least one older one is up there.
His website is:
http://www.appsecinc.com/techdocs/whitepapers.html He is the co-author of "Oracle Security" under Oracle Press.

that should get you started.

Paul

Do you Yahoo!?
Yahoo! Small Business $15K Web Design Giveaway http://promotions.yahoo.com/design_giveaway/

Please see the official ORACLE-L FAQ: http://www.orafaq.com

To unsubscribe send email to: oracle-l-request_at_freelists.org put 'unsubscribe' in the subject line.

--
Archives are at http://www.freelists.org/archives/oracle-l/
FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------

Received on Thu Apr 01 2004 - 17:39:25 CST