Re: Monitoring SQL statements in oracle

From: Pete Finnigan <plsql_at_petefinnigan.com>
Date: Wed, 21 Jan 2004 23:00:36 +0000
Message-ID: <0uwdDcAUSwDARxOp@peterfinnigan.demon.co.uk>

Hi,

Not sure if it is of use to you but i wrote a paper last year called "Detecting SQL injection in Oracle" which shows some ways to extract SQL passed to the database from the wire, trace and from the SGA. Obviously this is detecting SQL injection but it might be useful to you. The paper is at http://www.petefinnigan.com/orasec.htm

hth

kind regards

Pete

-- 
Pete Finnigan
email:pete_at_petefinnigan.com
Web site: http://www.petefinnigan.com - Oracle security audit specialists
Book:Oracle security step-by-step Guide - see http://store.sans.org for details.

Received on Wed Jan 21 2004 - 17:00:36 CST