Re: Securing a Shrink Wrapped application using Oracle XE

From: Brian Peasland <dba_at_nospam.peasland.net>
Date: Thu, 23 Nov 2006 16:48:58 GMT
Message-ID: <J9701p.Mq3@igsrsparc2.er.usgs.gov>

Jim Smith wrote:

> In message <Duc9h.158$Ll4.4_at_newsfe04.lga>, MRCarver 
> <mrcnewGroup_at_charter.net> writes

>> Oracle GURUS,
>>
>> BACKGROUND:
>> I am searching for a database engine that I can deploy to an end users
>> domain that the end user is unable to snoop into. This engine of
>> course will be coupled with an accompanying application, which can be
>> secured with a password, preventing even the machine administrator
>> from snooping into.
>>
>> QUESTION:
>> Can Oracle XE be configured to prevent a knowledgeable system
>> administrator from breaking into the database and extracting the data
>> and/or meta data.
>>
>> Please advise, as I am considering employing Oracle as my DB of choice.
>>
>> Regards,
>> Monte Carver

> 
> DO you want to protect the data or the database code?
> 
> If your issue is keeping your stored procedures secret, you can use the 
> wrap utility to create obfuscated versions for distribution.

For information on protecting the data, look towards the Oracle Database Vault:

http://www.oracle.com/technology/deploy/security/db_security/database-vault/index.html

Cheers,
Brian

-- 
===================================================================

Brian Peasland
dba_at_nospam.peasland.net
http://www.peasland.net

Remove the "nospam." from the email address to email me.


"I can give it to you cheap, quick, and good.
Now pick two out of the three" - Unknown

Received on Thu Nov 23 2006 - 10:48:58 CST