Oracle Database Vault
Oracle Database Vault implements data security controls within Oracle Database to restrict access to application data by privileged users. Reduce the risk of insider and outside threats and address compliance requirements, including separation of duties.
Watch the Database Vault video (7:45)
Explore Oracle Database Vault
Database Vault realms
Block unauthorized access to sensitive data by creating restricted application environments within Oracle Database. Oracle Database Vault security controls also help organizations address compliance with data privacy laws and standards such as the European Union General Data Protection Regulation (EU GDPR), the Payment Card Industry Data Security Standard (PCI-DSS), and numerous other regulations that require strong internal controls on access, disclosure, or modifications to sensitive information.
Database Vault command rules
Prevent malicious or accidental changes that disrupt operations by privileged user accounts. Command controls prevent unauthorized commands such as DROP TABLE or ALTER SYSTEM outside of specific maintenance windows.
Database Vault trusted paths
Use factors like client IP address, program, username, and time of day to enforce zero trust access to data and data operations. Since an attacker can't simply use a stolen account to access sensitive data, Database Vault can block unauthorized access to sensitive data and generate high value alerts notifying administrators of suspicious data access activity to help stop data theft before it happens.
Separation of duties
Enforce checks and balances on privileged users, preventing attackers from disabling security controls, creating rogue users, and accessing sensitive data by leveraging credentials from a single privileged account.
Integrated, performant, and scalable
Secure new and existing Oracle Database environments without the need for costly and time-consuming application changes. Database Vault is compatible with enterprise architectures, including Oracle Real Application Clusters (RAC), Oracle GoldenGate, and Oracle Data Guard, all without the need to deploy additional servers and agents.
Rakuten Securities restricts access to sensitive data with Oracle Database Vault
“Only Oracle could provide a one-stop shop for database security solutions, including access control and data encryption. It also met our requirements to enable a defense-in-depth protection approach by allowing surveillance of not only data in the database, but also the files in the operating system.”Takamitsu Arano,
Acting Manager, IT Division, CIF System Department, Rakuten Securities, Inc.
Oracle Database Vault use cases
-
Protect sensitive data
Block attackers from accessing sensitive data with stolen privileged user credentials—the most common attack vector today.
-
Prevent inadvertent access
Block accidental access by database administrators to sensitive data without compromising their ability to perform necessary tasks.
-
Prevent unauthorized database changes
Block accidental or malicious changes to production databases and restrict authorized changes to defined maintenance periods.
-
Enforce policy-based access control
Prevent misuse of privileged credentials outside allowed IP address, time of day, client programs, and more.
-
Separation of duties
Define and separate roles for security and administration so administrators can’t modify security policies or access sensitive data.
Resources
AskTOM Oracle Database Security Office Hours
AskTOM Office Hours offers free, open Q&A sessions with Oracle Database experts who are eager to help you fully leverage the multitude of enterprise-strength database security tools available to your organization.
LiveLabs Workshop: Oracle Database Vault
This workshop introduces Oracle Database Vault's features and functionality. Explore how to configure Database Vault to protect databases and the sensitive data contained therein with features like realms and trusted paths. Run this workshop on your own tenancy or reserve a time to run the workshop on LiveLabs, free of charge.
Critical patch updates, security alerts, and bulletins
Related content
- Video Demo: Oracle Database Vault Overview (3:09)
- Technical Brief: Oracle Database Vault Best Practices (PDF)
- Technical Brief: Oracle Database Vault DBA Best Practices (PDF)
- Technical Brief: Oracle Application Express and Oracle Database Vault (PDF)
- Database Vault Compliance Solutions
- SANS Institute Review: Oracle Database Vault (PDF)
You may also be interested in
Get started
Run the Database Security Assessment Tool
Quickly identify your database security posture and get recommendations to mitigate risks.
Try Oracle Autonomous Database
Try Autonomous Database with tools such as Oracle Application Express and Oracle SQL Developer.