Pete Finnigan

Subscribe to Pete Finnigan feed Pete Finnigan
PeteFinnigan.com's weblog is the only weblog dedicated to Oracle security.
Updated: 8 hours 3 min ago

A Brief History of PFCLScan - Database Security scanner

Thu, 2025-05-15 12:26
This is a short history of our PFCLScan product and therefore also a history of the other apps now built on top of PFCLScan such as PFCLObfuscate , PFCLCode , PFCLForensics and more. Obviously after such a long time and....[Read More]

Posted by Pete On 15/05/25 At 10:15 AM

Categories: Security Blogs

PeteFinnigan.com is now HTTPS

Wed, 2025-05-14 03:22
It has been a long time coming but I have finally got this website running on HTTPS / SSL. Google have been pushing webmasters and site owners to move to HTTPS for more than 10 years. Google in fact stated....[Read More]

Posted by Pete On 13/05/25 At 02:07 PM

Categories: Security Blogs

Embed Scripting Languages in PL/SQL Programs

Wed, 2025-05-14 03:22
One of the goals of creating an interpreter written in PL/SQL to execute a custom language was for our use in our tools. We wanted to be able to ship PL/SQL and customise it after its deployed without re-compiling the....[Read More]

Posted by Pete On 14/04/25 At 12:11 PM

Categories: Security Blogs

The search for existing encryption and wallets in the database

Wed, 2025-05-14 03:22
In the first blog in this series we discussed the main issue with using DBMS_CRYPTO to encrypt data within the database. This is the lack of key management provided by Oracle natively for use with this package. I had intended....[Read More]

Posted by Pete On 07/04/25 At 01:25 PM

Categories: Security Blogs

Encryption Key Management with DBMS_CRYPTO

Wed, 2025-05-14 03:22
I often get asked how to use DBMS_CRYPTO to encrypt data in the Oracle database. Or I used to be asked how to use DBMS_OBFUSCATION_TOOLKIT when it was the go-to encryption in an Oracle database. Before we go far; this....[Read More]

Posted by Pete On 02/04/25 At 02:22 PM

Categories: Security Blogs

Update on Oracle Security

Wed, 2025-05-14 03:22
Just an update as I have not posted too many blogs recently. I have a bag log of blog ideas to write on technical subjects directly relating to Oracle security so please watch out for those by subscribing / following....[Read More]

Posted by Pete On 19/03/25 At 03:00 PM

Categories: Security Blogs

AI and Oracle Security

Wed, 2025-05-14 03:22
Can we use AI in Oracle security? - yes as an answer? we can but how effective it would be means the answer is maybe? It depends on what we want to use AI for and how much data is....[Read More]

Posted by Pete On 27/02/25 At 03:35 PM

Categories: Security Blogs

Free Licenses for Oracle Security Software

Wed, 2025-05-14 03:22
We are holding a 3 day live, in person training event here in York, UK on March 11th to March 13th 2025 (Tuesday to Thursday). The class is taught by Pete Finnigan. The class is a unique event and will....[Read More]

Posted by Pete On 19/02/25 At 10:32 AM

Categories: Security Blogs

3 Day Oracle Security Training in York in March

Wed, 2025-05-14 03:22
Our recent 3 day Oracle Security training class in York scheduled in January was popular and a lot of people who enquired for the January class asked if we could do the class again in March. I decided to do....[Read More]

Posted by Pete On 06/02/25 At 10:22 AM

Categories: Security Blogs

Embed Scripting Languages in PL/SQL Programs

Mon, 2025-04-14 08:25
One of the goals of creating an interpreter written in PL/SQL to execute a custom language was for our use in our tools. We wanted to be able to ship PL/SQL and customise it after its deployed without re-compiling the....[Read More]

Posted by Pete On 14/04/25 At 12:11 PM

Categories: Security Blogs

The search for existing encryption and wallets in the database

Mon, 2025-04-07 14:01
In the first blog in this series we discussed the main issue with using DBMS_CRYPTO to encrypt data within the database. This is the lack of key management provided by Oracle natively for use with this package. I had intended....[Read More]

Posted by Pete On 07/04/25 At 01:25 PM

Categories: Security Blogs

Encryption Key Management with DBMS_CRYPTO

Thu, 2025-04-03 01:47
I often get asked how to use DBMS_CRYPTO to encrypt data in the Oracle database. Or I used to be asked how to use DBMS_OBFUSCATION_TOOLKIT when it was the go-to encryption in an Oracle database. Before we go far; this....[Read More]

Posted by Pete On 02/04/25 At 02:22 PM

Categories: Security Blogs

Update on Oracle Security

Wed, 2025-03-19 18:49
Just an update as I have not posted too many blogs recently. I have a bag log of blog ideas to write on technical subjects directly relating to Oracle security so please watch out for those by subscribing / following....[Read More]

Posted by Pete On 19/03/25 At 03:00 PM

Categories: Security Blogs

AI and Oracle Security

Fri, 2025-02-28 02:33
Can we use AI in Oracle security? - yes as an answer? we can but how effective it would be means the answer is maybe? It depends on what we want to use AI for and how much data is....[Read More]

Posted by Pete On 27/02/25 At 03:35 PM

Categories: Security Blogs

Free Licenses for Oracle Security Software

Wed, 2025-02-19 20:08
We are holding a 3 day live, in person training event here in York, UK on March 11th to March 13th 2025 (Tuesday to Thursday). The class is taught by Pete Finnigan. The class is a unique event and will....[Read More]

Posted by Pete On 19/02/25 At 10:32 AM

Categories: Security Blogs

3 Day Oracle Security Training in York in March

Thu, 2025-02-06 07:18
Our recent 3 day Oracle Security training class in York scheduled in January was popular and a lot of people who enquired for the January class asked if we could do the class again in March. I decided to do....[Read More]

Posted by Pete On 06/02/25 At 10:22 AM

Categories: Security Blogs

ORA-46373 - Correct Error number or Not?

Mon, 2025-01-06 11:29
I talked last week about an issue where I wanted to pre-create a unified audit policy with no rules so that I could create a number of policies for a customer in advance and then we could add the actions/rules....[Read More]

Posted by Pete On 06/01/25 At 12:22 PM

Categories: Security Blogs

ORA-46373 - Unified Audit Policies

Thu, 2025-01-02 17:15
I have a requirement to pre-create unified audit policies and then add the ACTIONS, PRIVILEGES, ROLES etc after they have been created based on some stored audit rules for a customer. We tried to create a policy with no actions....[Read More]

Posted by Pete On 02/01/25 At 02:51 PM

Categories: Security Blogs

What Should you do if your Oracle Database is Hacked?

Thu, 2024-12-19 10:24
This is the second talk that I did at the recent UKOUG conference at the East Side rooms in Birmingham. This talk discusses how you should respond if you think that your database has been breached or if you unfortunately....[Read More]

Posted by Pete On 19/12/24 At 02:26 PM

Categories: Security Blogs

Top 10 Things to Consider in Securing an Oracle Database

Wed, 2024-12-18 16:21
I presented recently at the UKOUG tech conference 2024 in Birmingham, UK at the Eastside rooms. This was a good conference and I had two talks there. This blog is about the first of those and includes a link to....[Read More]

Posted by Pete On 18/12/24 At 11:34 AM

Categories: Security Blogs

Pages