Call: +44 (0)7759 277220 Call
Blog

Pete Finnigan's Oracle Security Weblog

This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.

Home » Archives » August 2006 » Tom has an interesting post on Security via obscurity

[Previous entry: "BlackHat Last week"] [Next entry: "How to Unwrap PL/SQL BlackHat las vegas 2006 presentation slides are available"]

Tom has an interesting post on Security via obscurity

August 7th, 2006 by Pete


I spotted a nice post on Tom's blog today that was posted a couple of days ago. Toms post is titled "Security via obscurity..." and it talks about an email sent to Tom about his AskTom site displaying schema details when it errors. Tom points out that his site is not vulnerable to SQL Injection as he uses binds for all dynamic SQL and does not concatenate. This is an interesting post around SQL injection issues and security in general, particlularly the issues around defence in depth and security through obscurity.

  • PFCLScan

    Simply connect PFCLScan to your Oracle database and it will automatically discover the security issues that could make your Oracle database vulnerable to attack and to the potential loss of your data.

  • PFCL Obfuscate PFCLObfuscate

    PFCLObfuscate is the only tool available that can automatically add license controls to your PL/SQL code. PFCLObfuscate protects your Intellectual Property invested in your PL/SQL database code.

  • PFCL Training PFCLTraining

    PFCLTraining is a set of expert training classes for you, aimed at teaching how to audit your own Oracle database, design audit trails, secure code in PL/SQL and secure and lock down your Oracle database.

  • PFCL Services PFCLServices

    Choose PFCLServices to add PeteFinnigan.com Ltd to your team for your Oracle Security needs. We are experts in performing detailed security audits, data security design work and policy creation