Pete Finnigan's Oracle Security Weblog

I just found a link to this tool oraDep this morning in the DBA Village weekly newsletter. This tool is able to analyse the dependencies between objects in the database such as stored procedures, tables, views etc. It can do this at the source code level and the tool has many screens with differing views of the relationships. It can also produce HTML reports that can also show highlighted fragments of source code where the relationships exist. The tool also supports Oracle Forms source code.

This looks like a very useful tool but what has it got to do with Oracle security? - Quite a lot actually. When we conduct a security audit we often need to analyse the relationships between certain objects. To be also able to easily see how these objects are used in the source code even in Forms is extremely useful. If for instance we know that a certain table is critical we could use a tool like this to find out how that table is used and analyse if any issues can occur such as SQL Injection.

The tool - http://www.sam-trest.siteburg.com/ - (broken link) OraDep - Oracle Objects dependencies analysing is worth a look. I have updated my tools page to add a link to this tool.

It is not clear if this tool is commercial or not so I have added it to the commercial tools section for now. There is no license or pricing details but it does say that a trial version is available that is restricted. This would indicate that it will be commercial.

I should also say that I have not tried it yet, it just caught my eye as a useful tool for an Oracle security audit. I have also not analysed the market sector this program operates in to see what if any competition there is.