Re: Looking for Tools to check Oracle 8.x Security
From: Sybrand Bakker <postbus_at_sybrandb.demon.nl>
Date: 2000/04/26
Message-ID: <s4fegs40n432cpv51534j0be6phdoebgu4_at_4ax.com>#1/1
Date: 2000/04/26
Message-ID: <s4fegs40n432cpv51534j0be6phdoebgu4_at_4ax.com>#1/1
On 26 Apr 2000 17:46:59 GMT, Daniel Curry <pineapp_at_netcom12.netcom.com> wrote:
> I am looking for any tools that can validate that the Database Security
>is OK? I have found a product from ISS, but it is very expensive to
>purchase.
> The tool will verified access and check to see if no unusual login
>accounts, ie scot/tiger.
>
>Thank you,
What about using the audit facilities of Oracle ? Make sure audit_trail = true in init<sid>.ora, bounce the database and audit ... (either select,insert,update, connect) whenever unsuccesful will record any security breach
Hth,
Sybrand Bakker, Oracle DBA Received on Wed Apr 26 2000 - 00:00:00 CEST