Pete Finnigan's Oracle Security Forum - How To Block Super User In Particular Time.

Forum

Home/Forum

Welcome, Guest. Please Login. Apr 19^th, 2024, 11:01pm News: If you would like to register contact the forum admin
Home \| Help \| Search \| Members \| Login

   Pete Finnigan's Oracle Security Forum
   Oracle Security
   Oracle Security (Moderator: Pete Finnigan)
   How To Block Super User In Particular Time.

« Previous topic | Next topic »

Pages: 1

Reply | Notify of replies | Send Topic | Print

Author

Topic: How To Block Super User In Particular Time. (Read 4361 times)

Pete Finnigan
PeteFinnigan.com Administrator

Oracle Security is easier if you design for it

View Profile | WWW | Email

Gender: male

Posts: 309

How To Block Super User In Particular Time.
« on: Aug 20^th, 2010, 11:11am »

Quote | Modify

Hey Guys...

I really found this website very helpful. But here this time i got stuck, I just simply want to know the way to block the "Super User" or "DBA " to access the Oracle Database.
Definitely their might be a way out for this. Is there any method at the time of installation of database we can provide the agreement date. So that after that date the user and the super user/DBA will not able to fetch/access the data from database.

Definitely their will be a way to resolve this...
It will be really appreciated if will get the solution for this.

Thanks in advance.

Best Regards
Vibhu

IP Logged

Pete Finnigan (email:pete@petefinnigan.com)
Oracle Security Web site: http://www.petefinnigan.com
Forum: http://www.petefinnigan.com/forum/yabb/YaBB.cgi
Oracle security blog: http://www.petefinnigan.com/weblog/entries/index.html

Pete Finnigan
PeteFinnigan.com Administrator

Oracle Security is easier if you design for it

View Profile | WWW | Email

Gender: male

Posts: 309

Re: How To Block Super User In Particular Time.
« Reply #1 on: Aug 20^th, 2010, 12:17pm »

Quote | Modify

Hi Vibhu,

Could you give us some more information what you are trying to accomplish with this. For example: are you trying to block one specific user? SYS or SYSTEM or someones account?

Or do you want to block all DBA accounts? That doesn't seem like a good idea since DBAs probably need to administer the database.

IP Logged

Pete Finnigan
PeteFinnigan.com Administrator

Oracle Security is easier if you design for it

View Profile | WWW | Email

Gender: male

Posts: 309

Re: How To Block Super User In Particular Time.
« Reply #2 on: Aug 20^th, 2010, 12:34pm »

Quote | Modify

Hi Marcel

Actually the motto is to block the complete access to the database. For example:

As a vendor, we are the application provider, once we'll installed our application and the oracle database (registered version). Vendor usually provide with the support to the application, for that Annual Maintenance Charges(AMC) are there. But right now as any of the client will over with the AMC, they need not to pay anything as AMC as because application is running perfectly, they won't renew with the AMC. So i want any solution, like if the AMC Date will be over, on or from same date the database access will also stopped, or simply all the users and the Super user/DBA received with a message like "Please Contact To The Vendor, To Renew The AMC".

I Suppose the above example will figure you out, that what exactly I need.

As the business point of view, I need any solution to secure the Data access after a particular Span of time(or the contract period).

Best Regards
Vibhu

IP Logged

Pete Finnigan
PeteFinnigan.com Administrator

Oracle Security is easier if you design for it

View Profile | WWW | Email

Gender: male

Posts: 309

Re: How To Block Super User In Particular Time.
« Reply #3 on: Aug 20^th, 2010, 3:58pm »

Quote | Modify

Wow. Would you even deny them to get the data they gathered over the year? That sounds extremely customer unfriendly. Hint: it's not such a great business model as it may sound now. There are much better ways to convince customers they need your support, like reminding them regularely what you do for their money.

Anyway I don't think there is such a feature, except maybe Database Vault. It can block even DBAs, but the licence is probably more expensive than the AMC.

IP Logged

Pete Finnigan
PeteFinnigan.com Administrator

Oracle Security is easier if you design for it

View Profile | WWW | Email

Gender: male

Posts: 309

Re: How To Block Super User In Particular Time.
« Reply #4 on: Aug 21^st, 2010, 9:48am »

Quote | Modify

Hello Marcel.

Its not on the rude side. But sometimes customers deny or simply postpone the plans to through with the payments.

Such customers forced to take some steps like this. If you have some other alternate to stop with the services calmly so that clients will have to call the vendor to start with the services.

So is there any way out which will provide the solution for both the vendor and the client.

I need a calm and polite way out.

As I already know about the database vault, but that is not the budgeted solution. Is there any other alternate for this.

Will VPD(Virtual Private Database) help me out from this? Will it possible to define some policies in RLS(Row Level Security), so that the access will be stopped after some time?

Please Suggest me for the above.

It would be really appreciated.

Thanks in advance.

Best Regards
Vibhu

IP Logged

Pete Finnigan
PeteFinnigan.com Administrator

Oracle Security is easier if you design for it

View Profile | WWW | Email

Gender: male

Posts: 309

Re: How To Block Super User In Particular Time.
« Reply #5 on: Aug 23^rd, 2010, 12:55pm »

Quote | Modify

Hey Marcel

I'm still waiting for ur response.

Is there any other alternate, in spite of database vault.
Will VPD provide & resolve the concern?

Best Regards
Vibhu

IP Logged

Pete Finnigan
PeteFinnigan.com Administrator

Oracle Security is easier if you design for it

View Profile | WWW | Email

Gender: male

Posts: 309

Re: How To Block Super User In Particular Time.
« Reply #6 on: Aug 24^th, 2010, 12:42pm »

Quote | Modify

Hey MJ

I'm still waiting for your response.

Please assist me on this.

Best Regards
Vibhu

IP Logged

Pete Finnigan
PeteFinnigan.com Administrator

Oracle Security is easier if you design for it

View Profile | WWW | Email

Gender: male

Posts: 309

Re: How To Block Super User In Particular Time.
« Reply #7 on: Aug 24^th, 2010, 1:01pm »

Quote | Modify

Hi Vibhu,

I still think it is a rather harsh measure. You might want to warn customers that that might happen if they don't pay. Probably somewhere in the fine print.

Virtual Private Database and RLS are the same thing as far as I know and as long as the DBA reigns on the database server, there is always a way to get around the data. Which I would probably want if I was the DBA.

Also, I would probably backup regularely. And I would make sure to export the data after restore, so I would still have them safely somewhere.

The message is: expect a lot of creativity if people find out that access to their data is blocked.

Your best bet would be to block the application in stead of the database. It's still harsh, but at least they haven't lost the data, which I think is their right to keep.

IP Logged

Pete Finnigan
PeteFinnigan.com Administrator

Oracle Security is easier if you design for it

View Profile | WWW | Email

Gender: male

Posts: 309

Re: How To Block Super User In Particular Time.
« Reply #8 on: Aug 24^th, 2010, 1:11pm »

Quote | Modify

Thanx a tonn MJ

But this even i'm thinking from the client's side too. Because sometimes clients want to deploy the application on internet. So i want to provide them with the secured network. As the world is full of hackers. For that purposes if we will restrict the specific roles and privileges to the database, simultaneously we will apply VPD concept, will that help to protect the data from stealth.

Thanks & Regads
Vibhu

IP Logged

Pete Finnigan
PeteFinnigan.com Administrator

Oracle Security is easier if you design for it

View Profile | WWW | Email

Gender: male

Posts: 309

Re: How To Block Super User In Particular Time.
« Reply #9 on: Aug 30^th, 2010, 8:16am »

Quote | Modify

Hi MJ

Hope you got some conclusion...

Best Regards
Vibhu

IP Logged

Pages: 1

Reply | Notify of replies | Send Topic | Print


« Previous topic \| Next topic »

PFCLScan
Simply connect PFCLScan to your Oracle database and it will automatically discover the security issues that could make your Oracle database vulnerable to attack and to the potential loss of your data.

Learn more
PFCLObfuscate
PFCLObfuscate is the only tool available that can automatically add license controls to your PL/SQL code. PFCLObfuscate protects your Intellectual Property invested in your PL/SQL database code.

Learn more
PFCLCode
PFCLCode is a tool to allow you to analyse your PL/SQL code for many different types of security issues. PFCLCode gives you a detailed review and reports and includes a powerful colour syntax highlighting code editor

Learn more
PFCLForensics
PFCLForensics is the only tool available to allow you to do a detailed live response of a breached Oracle database and to then go on and do a detailed forensic analysis of the data gathered.

Learn more
PFCLReselling
PeteFinnigan.com Limited has partnered with a small number of relevant companies to resell their products where they enhance or compliment what we do

Learn more
PFCLATK
PFCLATK is a toolkit that allows detailed pre-defined policy driven audit trails for your Oracle database. The toolkit also provides for a centralised audit trail and centralised activity reporting

Learn more
PFCLCookie
PFCLCookie is a useful tool to use to audit your websites for tracking cookies. Scan websites in a natural way using powerful browser driven scanner

Learn more
PFCLTraining
PFCLTraining is a set of expert training classes for you, aimed at teaching how to audit your own Oracle database, design audit trails, secure code in PL/SQL and secure and lock down your Oracle database.

Learn more
PFCLServices
Choose PFCLServices to add PeteFinnigan.com Ltd to your team for your Oracle Security needs. We are experts in performing detailed security audits, data security design work and policy creation

Learn more
PFCLConsulting
Choose PFCLConsulting to ask PeteFinnigan.com Limited to set up and use our products on your behalf

Learn more
PFCLCustom
All of our software products can be customised at a number of levels. Choose this to see how our products can be part of your products and services

Learn more
PFCLCloud
Private cloud, public cloud, hybrid cloud or no cloud. Learn how all of our services, trainings and products will work in the cloud

Learn more
PFCLUserRights
PFCLUserRights allows you to create a very detailed view of database users rights. The focus of the reports is to allow you to decide what privileges and accounts to keep and which to remove.

Learn more
PFCLSTK
PFCLSTK is a toolkit application that allows you to provide database security easily to an existing database. PFCLSTK is a policy driven toolkit of PL/SQL that creates your security

Learn more
PFCLSFTK
PFCLSFTK is a toolkit that solves the problem of securing third party applications written in PL/SQL. It does this by creating a thin layer between the application and database and this traps SQL Injection attempts. This is a static firewall.

Learn more
PFCLSEO
PFCLSEO is a web scanner based on the PFCLScan technology so that a user can easily scan a website for technical SEO issues

Learn more