Call: +44 (0)7759 277220 Call

Pete Finnigan's Oracle Security Weblog

This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.

[Previous entry: "UKOUG Unix SIG 22nd Jan and more"] [Next entry: "Orablogs is no more (well soon)"]

Pete Finnigan; new VPD in the real world paper available

I spoke at the UKOUG UNIX SIG in London yesterday (22nd January 2008) about Using VPD in the real world. The talk focused on the fact that VPD is not a standalone solution and is ideally used as one component of an overall security solution. Also the paper covered the issues surrounding securing VPD itself to prevent bypass of its features and inevitably access to the data and also issues with alteration to VPD setup. The paper also covered some of the features of VPD, performance and some guidelines on implementing it.

The paper is available with one slide per page and also with six slides per page. Both are pdf files. The papers are available as usual from my Oracle security white papers page