Auditing an Oracle database for security issues is very important. PeteFinnigan.com provides all of the information and tools that you will need Click here for details of PeteFinnigan.com Limited's detailed Oracle database security audit service Click here for details of PeteFinnigan.com Limited's Oracle Security Training Courses
There are 24 visitors online    

Pete Finnigan's Oracle security weblog


Home » Archives » September 2005 » archivelog mode - or not?

[Previous entry: "Wifred notes that Patch 9.0.4.2.0 has a bug in Oracle forms"] [Next entry: "jDUL / DUDE (Database Unloading by Data Extraction) - an alternative to DUL"]

archivelog mode - or not?

September 6th, 2005 by Pete

Post to del.icio.us   Post to Furl   Digg!

I saw with interest Tom's post to his blog titled "Archive Log Mode" a few days ago and made a note to have a look. Whilst this post is not directly about security it has a direct bearing on the results of a successful hack. Basically Tom regales a story that he gets to hear about twice a week. Someone had emailed him and said "help, the database has crashed, it won't open, we don't have a recent backup and its not in archivelog mode.". Basically they have had it. The data has gone. If you do not plan backup strategies properly, have disaster recovery plans and test for all eventualities of failure and recovery your data is doomed. It may be that you lose the data through a software failure or a hardware failure or because of a hacker. The bottom line is that if you do not have a way to recover lost data you are doomed.

That said some sites do run without archivelog mode enabled but the big difference is that its a proper decision and they know the consequences and also know how to get all their data back. This is sometimes a solution in data warehouses.

Also don't forget that there are some tools available that can help open a corrupted database and get some data out of it. Oracle has the Data UnLoader (DUL) tool. This is a tool closely guarded jewel in Oracles crown and if you have a crashed database and no other way to get the data out then you can call Oracle in to help with this tool. There are at least a couple of private tools out there that can be used as an alternative, one of which i will tell you about in a post tomorrow.

I have just added a couple of links to my Oracle Internals page about Data UnLoader (DUL), one is a link to the user guide for DUL and another link to a post about its use and some examples.



September 2005
SMTWTFS
    123
45678910
11121314151617
18192021222324
252627282930 

This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.

Weblog Home
Weblog Archives

Oracle Security Step-by-Step (Version 2.0)

Home
Oracle Security Tools page
Oracle security papers
Oracle Security alerts

Web Development
SQL Server Security

RSS 1.0 FEED
RSS 2.0 FEED
Atom 0.3 FEED
Powered by gm-rss 2.0.0


Valid XHTML 1.0!