Pete Finnigan's Oracle security weblog

Oracle Security - Hidden Grant When Create a Role and Revoke in a CDB

I am keen to reduce grants made in any customers database. One area we can focus on is this curios state of affairs that the creator of a role in the Oracle database is also granted that role as part....[Read More]

Posted by Pete On 07/06/22 At 10:31 AM

Adaptive Database Auditing and Security

We are working with customers to design security for their Oracle databases and also to help and design audit trails. An audit trail is the easiest countermeasure or control that can be added to a database because if you do....[Read More]

Posted by Pete On 25/05/22 At 07:38 PM

The challenges of securing data in an Oracle database

I will be doing a talk at an even in Eight Members Club Bank, 1 Change Alley, London,EC3V 3ND on the 14th June 2022. The event runs from 8am to 10am. The event is free to attend and to register....[Read More]

Posted by Pete On 11/05/22 At 10:04 AM

Add License Checks Anywhere in your PL/SQL

Our product PFCLObfuscate allows dynamic obfuscation of PL/SQL. The original use of this in the product was to add licensing automatically to PL/SQL. This is similar to products that protect binaries such as C programs or DLLs. It is common....[Read More]

Posted by PFCLObfuscate On 30/03/22 At 05:31 PM

Software from Building Blocks - Fast Development - One Month Projects

More than 20 years ago I was working away from home and was in a loud restaurant / bar in London and chatting to colleagues there and we were all talking about ways to make money and ideas. I proposed....[Read More]

Posted by Pete On 22/03/22 At 06:33 PM

Make Pete Finnigan a remote expert part of your team

Over the last few years I have personally been asked many times to come and work full time in large companies to head up or direct their Oracle security efforts or more general database security efforts. Others ask us to....[Read More]

Posted by Pete On 10/03/22 At 01:40 PM

Do we Need to Revoke PUBLIC from a User?

I was having a discussion a couple of weeks ago with a friend and he said that in the company he is working at the Oracle database security standard / guide that they are working to told them that they....[Read More]

Posted by Pete On 02/03/22 At 02:37 PM

Strong Passwords with Oracle Wallets

I get involved a lot in recent years with Oracle SSL, TLS, TCPS, Kerberos and more. A lot more customers now are trying to use stronger database authentication as well as TLS/SSL encryption and many other features such as full....[Read More]

Posted by Pete On 23/02/22 At 02:01 PM