The SANS Institute has a set of security checklists based around their S.C.O.R.E. initiative. These are a set of free checklists that are being developed by SANS where each document has a lead developer who is an expert in the particular area or particular software in respect to the security issues. These are a great resource for anyone wanting to secure a particular piece of software or application.
The Oracle checklist is based around the SANS Oracle security step-by-step guide and reflects the thinking and research of many Oracle experts who know how to secure Oracle databases. The document for Oracle has just been updated to version 2.0 to reflect the changes made in the newly released version of the step-by-step book. I was the author of the book and the S.C.O.R.E. document and I am also just been appointed as the lead developer / maintainer of the checklist by SANS.
The Oracle S.C.O.R.E. checklist can be found here
Blog
Pete Finnigan's Oracle Security Weblog
This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.
[Previous entry: "Arup Nanda is interviewed about the Oracle security patch nightmare"] [Next entry: "KK Mookhey writes about auditing Oracle security"]
September 2004
- A new Oracle security based weblog - 09/20/2004 by 09/20/2004
- Are your system triggers firing? - 09/21/2004 by 09/21/2004
- Arup Nanda is interviewed about the Oracle security patch nightmare - 09/22/2004 by 09/22/2004
- The SANS S.C.O.R.E. Oracle security checklist has been updated - 09/23/2004 by 09/23/2004
- KK Mookhey writes about auditing Oracle security - 09/24/2004 by 09/24/2004
- eweek article: Oracle Users Take Aim at High Costs, Security Silence - 09/25/2004 by 09/25/2004
- Oracle Database 9i SQL Command Buffer Overflow Vulnerability - 09/26/2004 by 09/26/2004
- Creating read only users - 09/28/2004 by 09/28/2004
- Oracle announce that clients also need patching for alert #68 - 09/30/2004 by 09/30/2004
Archives
Syndication
Powered by gm-rss 2.0.0
