Oracle Technology Network

Database
Middleware
Developer Tools
Enterprise Management
Applications Technology
Products A-Z

BI & Data Warehousing
Embedded
Java
Linux
.NET
PHP
Security
Technologies A-Z

Enterprise Architecture
Enterprise 2.0
Grid
Service-Oriented Architecture
Virtualization

Join OTN
Oracle ACEs
Oracle Mix
Oracle Wiki
Blogs
Podcasts
Events
Newsletters
Oracle Magazine
Oracle Books
Certification
User Groups
Partner White Papers

GETTING STARTED

E-mail this page

database security

Security Technology Center

Oracle delivers secure infrastructure through a wide range of products, processes, and technologies to help prevent unauthorized access to confidential information, reduce the cost of managing users, and facilitate privacy management. (Note: Oracle does not validate the information on any third-party sites or content you may see here.)

View the most recent Critical Patch Update Advisory (October 2009)

What's New
Untitled Document Oracle Fusion Middleware Security: The new Oracle Entitlements Server (OES) and Oracle Web Services Manager (OWSM) 11g integration is finally here! In response to many requests, Josh Bregman builds on work by Kamlesh Patel to provide an OES-OWSM Integration FAQ posted Mon, 09 Nov 2009 20:22:02 +0000 Oracle OpenWorld Live Video: Mary Ann Davidson Oracle Chief Security Officer Mary Ann Davidson fields questions at the OTN Lounge at Oracle OpenWorld 2009. posted Mon, 19 Oct 2009 18:27:06 +0000 Download: Oracle Enterprise Single Sign-On Suite With this new release admins can now easily deploy Oracle Enterprise Single Sign-On into their existing infrastructure with no integration or large deployment effort. posted Tue, 06 Oct 2009 18:39:50 +0000 New Book: Applied Oracle Security This Oracle Press guide demonstrates practical applications of the most compelling methods for developing secure Oracle database and middleware environments. You will find full coverage of the latest and most popular Oracle products, including Oracle Database and Audit Vaults, Oracle Application Express, and secure Business Intelligence applications. posted Tue, 06 Oct 2009 18:31:12 +0000 Blog: Oracle Fusion Middleware Security: "What is the point of all this?" Josh Bregman from the Oracle Fusion Middleware Architecture Group offers a short list of SOA use cases that require message level security. posted Thu, 24 Sep 2009 19:41:11 +0000 Blog: Are these your files? I found them on my cloud Drip drip drip… Is this the sound of your cloud leaking? William Vambenepe wants to know. posted Wed, 02 Sep 2009 14:54:42 +0000
More...

Documentation and Best Practices
	Critical Patch Update Implementation (PDF)
	Oracle Database Security Checklist (PDF)
	Oracle Database Security Guide
	Tutorial: Defending Against SQL Injection Attacks
	Web Services Security Guide
	Achieving Sarbanes-Oxley Compliance with Oracle Identity Management (PDF)

Community Content
	How-To: Set Up X509 Certificate Authentication for Oracle WebLogic Server
	Authorizing Access to Dynamic Spatial-Temporal Data
	Learn Database Security Best Practices: Project Lockdown
	How To Encrypt Data in Oracle Using PHP
	Securing a .NET Application on the Oracle Database
	Understanding Transparent Data Encryption
	Database Security: Beyond the Password
	Using VPD in an Oracle HTML DB Application
	Encrypt Your Data Assets
	Fine-Grained Auditing in Oracle Database 10g (3-part series)
	Oracle 10g Virtual Private Database in Action
	More Security Articles...

Bloggers

· Mary Ann Davidson (Oracle CSO)	· Nishant Kaushik
· Clayton Donley	· Mark Wilcox
· Xander Heemskerk	· Security Inside Out
· Phil Hunt	· Security Management Team
More Blogs

Discussions

Security Technology	Identity Management	Audit Vault
Untitled Document BASE64 encoding mod_security a... Nov 25, 2009 by: when upload excel in R12 , occ... Nov 25, 2009 by: user12016809 Re: network encryption not wor... Nov 24, 2009 by: Justin Cave Re: network encryption not wor... Nov 24, 2009 by: dmello Oracle Advanced Security clear... Nov 24, 2009 by: dmello	Untitled Document Re: how to change Host of Orac... Nov 26, 2009 by: mmiller how to change Host of Oracle A... Nov 26, 2009 by: Leôncio Re: OIM in DIstributed environ... Nov 26, 2009 by: rajsunny Re: How to populate the enddat... Nov 26, 2009 by: rajsunny Re: Delete Reconciliation fail... Nov 26, 2009 by: rajsunny	Untitled Document Redo Collector Goes down frequ... Nov 25, 2009 by: user770440 Re: Audit Vault 10.2.3 collect... Nov 24, 2009 by: yves77 Audit Vault 10.2.3 collector n... Nov 24, 2009 by: yves77 Re: the format of Audit log fi... Nov 24, 2009 by: user773417 Re: Database vault URL is not ... Nov 22, 2009 by: damorgan

Security Technology

·	Database Platform Security and Compliance
·	Identity Management Infrastructure

Security Downloads

	Oracle Identity Management
	Oracle Database Vault
	Oracle Audit Vault
	Oracle Secure Backup
	Oracle Secure Enterprise Search

Security Response

·	Critical Patch Updates
·	BEA Security Advisories Archive
·	Security Vulnerability Fixes - Policy and Process
·	Critical Patch Update Implementation Best Practices (PDF)

Podcasts

·	Mary Ann Davidson Interview
·	Identity Management: Standards
·	Identity Management: Application-Centric Identity Management
·	Identity Management: Attestation
·	Identity Management: Virtual Directories
·	Identity Management: Fine-Grained Authorization

E-mail this page

	About Oracle \| \| Careers \| Contact Us \| Site Maps \| Legal Notices \| Terms of Use \| Privacy