Call: +44 (0)7759 277220 Call
Blog

Pete Finnigan's Oracle Security Weblog

This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.

[Previous entry: "A new release of Inguma"] [Next entry: "A new version of the Oracle password cracker woraauthbf is available"]

Slides from Pete Finnigan Oracle Security webinar available



This afternoon UK time, Morning time states side I gave a 45 minute webinar with Sentrigo around the subject of Oracle security, particularly around the issues with auditing, hacking and securing an Oracle database. I started out with a 10 - 15 minute demo of how real systems are hacked, this is based on extensive experience with reviewing real systems and the fact that the easiest way in is simply by using default accounts, badly designed features and easy to guess TNS settings. The rest of the slides are based on my two hour master class. The slides for this webinar are now available on my Oracle security white papers page.

This was my first webinar as a speaker, I have done podcasts before so that was good experience. It was enjoyable but slightly wierd to sit in your own office and simply talk into the phone with no reaction or feedback verbally and without seeing anyones face to see recations.

There has been 6 Comments posted on this article


March 29th, 2008 at 12:01 am

Marc Handelman says:

Pete - I attended the seminar this morning, and I have to extend my thanks for a great demo. It was as close to a real world scenario as I have seen in a demonstration in quite some time. I am quite certain, indeed, that we all appreciated your professionalism, candor, and knowledge, thanks a lot for your time. I can imagine the disconnect from your audience was rather odd, however, it went smooth (from the audience point of view)!



March 31st, 2008 at 09:10 am

Pete Finnigan says:

Hi Marc,

Thanks for your feedback, it's much appreciated to hear how it went from the "other" end. i have had a few nice emails from people also on the webinar, it seems that it was well received, it is always good to hear that it was useful to people.

Thanks

Pete



March 31st, 2008 at 09:21 pm

Daniel Scabello says:

Hi Pete,

I started watching the seminar but I got an emergency on a Customer (a Dba was playing wrong with statistics on Production server). crazy

I already download the slides, (thanks), but I was wondering, Is the seminar available with slides, voice, examples, etc on video at youtube/gvideo or some media like that ?

The short part that I got was very intresting, thanks by sharing your knowledge!

Daniel Scabello
- Brazil
ps. sorry by my english :\



March 31st, 2008 at 10:34 pm

merkmerc says:

Ditto Daniel's request. I've encountered some DBA's who don't think much of audit results - I'd love to have a video-type thing to show them how easy it is.



April 1st, 2008 at 09:09 am

seydon says:

Thanks for seminar.
It would be very good, if seminar will be avaleible as video with slides, voice, exemples and so on...



April 3rd, 2008 at 09:13 pm

Pete says:

Tbanks for the comments. The Sentrigo folks reecorded the session so video and sound should be available. I will post a link when I know about it.

cheers

Pete