Call: +44 (0)7759 277220 Call
Blog

Pete Finnigan's Oracle Security Weblog

This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.

[Previous entry: "Oracle Post Exploitation and Password cracking"] [Next entry: "Free Oracle Security Webinar Recording On-Line"]

Webinar: The right way to secure Oracle by Pete Finnigan - Wednesday 29 September 2010



I am going to present my paper "The right Way to Secure Oracle" on Wednesday 29th September 12:00pm - 1pm EDT which should be 17:00 UK time (we are on BST at the moment and New York is also on DST, so 12 noon New York and 5pm UK.

Here is my text from the registration page:

Most companies use the checklist/tip based approach to secure their databases. However, this is a flawed approach. The checklists available for hardening are based around parameters and the core database software " not the data. The goal must be to secure the *data*, not the software; of course we must use the software setttings to secure the data, but the focus of any data security project must be the data.

Pete will show the issues with the traditional approach and then outline what is the correct approach to securing data with lots of examples and tips. Pete will work through the process needed step by step to target and understand your data, and then outline steps to secure it.

Presenter: Pete Finnigan
Pete is well known in the Oracle and security worlds for contributing to the field with books, papers and presentations. Pete wrote the SANS Oracle Security Step by Step (SANS) and created the S.C.O.R.E checklist, and the CIS Benchmark is based on his work. He recently wrote chapters on data security and user security for the new Oak Table book, "Oracle Expert Practices." Pete also consults for clients worldwide, securing their data through design work and security audits, and also teaching his very successful training courses.


If you would like to join the webinar, please go to the registration page.