Oracle Label Security

Oracle Label Security was introduced in Oracle8i to provide multi-level security capabiliities within the Oracle Database for government and defense organizations. Since then, the use of label based access control technology has expanded well beyond the traditional government and defense sectors to include commercial organizations. Oracle Label Security has the ability to -

• Help enforce regulatory, privacy and related access control policies and extend other security solutions including Oracle Database Vault.
• Enforce traditional multi-level security (MLS) policies within government and defense applications.

Label Security adds a powerful dimension to the access control decision process, extending access control decisions well beyond the traditional object level privileges such as select, insert, update and delete.

Oracle Label Security authorizations can be used as Factors inside Oracle Database Vault and within features such as Virtual Private Database to determine need-to-know for 'column relevant' VPD policies protecting information such as social security numbers and credit cards. Please refer to the Label Security paper for commerical customers for more information on use cases.

For government and defense applications Oracle Label Security provides multi-level security (MLS) to protect sensitive information. Please refer to the Label Security best practices paper for governement and defense applications for more information on MLS within the Oracle database.