Organizations are using CrossGeneration Security Rapid Start offerings to show quick returns on investment, reduce data security risk, and meet compliance and privacy requirements.
Oracle Audit Vault consolidates audit data from Oracle and non-Oracle databases, operating systems, directories, file systems, as well as application specific audit data. Auditing is an important tool for both compliance monitoring and forensic analysis of data breaches. Audit records provide an irrefutable record of actions taken whether they are generated by a database, directory, or operating system.
Oracle Database Firewall acts as the database’s first line of defense on the network, enforcing expected application behavior while helping prevent SQL injection, application bypass, and other malicious activities from reaching the database. Database Firewall monitors SQL traffic looking for, alerting on and preventing unauthorized or out-of-policy SQL statements.
Oracle Database Vault provides the industry’s most comprehensive access control capabilities for the Oracle Database. Oracle Database Vault provides essential safeguards against common threats, including stolen credentials, misuse of privileged accounts to access sensitive data, and threats that exploit weaknesses in applications. Oracle Database Vault also includes a powerful runtime privilege analysis capability that can be used to tighten privilege and role grants and increase the security of the overall application.
Transparent Data Encryption and Oracle Key Vault
Transparent Data Encryption enables the user to encrypt individual table columns or an entire tablespace. When a user inserts data into an encrypted column or tablespace, Transparent Data Encryption automatically encrypts the data. When authorized users select the data, the data is automatically decrypted. Oracle Key Vault can also manage encryption keys centrally. In addition to Oracle keystores, Oracle Key Vault enables the user to securely share other security objects, such as credential files and Java keystores, across the enterprise.