Re: Auditing

Hi

You might be interested in a paper I wrote recently called "introduction to Oracle auditing" published on security focus. A link to it is available on my site http://www.petefinnigan.com/orasec.htm - its the second paper from the top. It covers basic audit settings and includes some SQL to detect some basic abuses such as attempts to log on using non existent accounts, users sharing accounts, logons out of hours etc. Its quite basic and aimed at getting people to turn on audit by showing what can be detected!.

hth

kind regards

Pete

-- 
Pete Finnigan
email:pete_at_petefinnigan.com
Web site: http://www.petefinnigan.com - Oracle security audit specialists
Book:Oracle security step-by-step Guide - see http://store.sans.org for details.