Pete Finnigan's Oracle security weblog

Join the Oracle Security Masterclass this December in York!

Tue, 11 Nov 2025 10:06:47 +0000

Are your organisation’s Oracle databases fully secured or are you leaving the door ajar to unwanted access, data leaks or worse? If you’re responsible for managing, designing or auditing Oracle databases, then the upcoming three-day course by Pete Finnigan is....[Read More]

Posted by Pete On 11/11/25 At 10:01 AM

AI for Oracle Security

Tue, 11 Nov 2025 10:06:47 +0000

I spoke about AI and Oracle security back in February in this blog - AI and Oracle Security . I asked the question can we use AI (LLM / Generative AI) in Oracle Security and if so how? The two....[Read More]

Posted by Pete On 15/10/25 At 12:42 PM

Can we Detect Disable Trigger in the Oracle Database

Tue, 11 Nov 2025 10:06:47 +0000

If i want to create layered security in a database around something such as specific data or to protect access to a resource or perhaps control access to a privilege then we can create a security layer using standard features....[Read More]

Posted by Pete On 24/09/25 At 08:37 AM

Fuzzing PL/SQL and Secure Design Patterns for PL/SQL and Oracle

Tue, 11 Nov 2025 10:06:47 +0000

I have just been notified that I have had two sessions accepted for the UKOUG conference from 30th November to 2nd December 2025 at the East Side Rooms in Birmingham. My first session is called Fuzzing PL/SQL and is overviewed....[Read More]

Posted by Pete On 22/09/25 At 04:41 PM

Happy 21st Anniversary to my Oracle Security Blog

Tue, 11 Nov 2025 10:06:47 +0000

The 21st anniversary of this blog is coming up on the 20th September 2025. I started this blog on the 20th of September 2004 and it has been doing well ever since. I write almost exclusively on the subject of....[Read More]

Posted by Pete On 10/09/25 At 11:55 AM

Can we Block EXECUTE ANY PROCEDURE for our API?

Tue, 11 Nov 2025 10:06:47 +0000

I did a five part series on the security of AUDSYS.AUD$UNIFIED and showed how it works at a functional level and how it might be secured by Oracle and how we might design a similar system using standard database license....[Read More]

Posted by Pete On 09/09/25 At 08:56 AM

Testing a READONLY table and sometimes WRITE and DELETE

Tue, 11 Nov 2025 10:06:47 +0000

This is the next part of the series looking at the AUDSYS schema and AUD$UNIFIED table that Oracle has created and protected. In the first part we explored what AUDSYS and AUD$UNIFIED looks like in terms of security; in part....[Read More]

Posted by Pete On 03/09/25 At 11:38 AM

Implement a Test System to Create a Readonly and Sometimes Insert / Delete Table

Tue, 11 Nov 2025 10:06:47 +0000

This is the next part (4th part) of the series exploring the AUDSYS schema and AUD$UNIFIED table that is READONLY with a lot of INSERTING and sometimes deleting. In the first part we explored the AUDSYS schema and the AUD$UNIFIED....[Read More]

Posted by Pete On 26/08/25 At 08:54 AM