Implementing Database Security and Auditing

This book is about database security and auditing. You will learn many methods and techniques that will be helpful in securing, monitoring and auditing database environments. It covers diverse topics that include all aspects of database security and auditing - including network security for databases, authentication and authorization issues, links and replication, database Trojans, etc. You will also learn of vulnerabilities and attacks that exist within various database environments or that have been used to attack databases (and that have sincebeen fixed). These will often be explained to an "internals" level. There are many sections which outline the "anatomy of an attack" - before delving into the details of how to combat such an attack. Equally important, you will learn about the database auditing landscape - both from a business and regulatory requirements perspective as well as from a technical implementation perspective. Clustered configuration first hit the scene nearly 20 years ago when Digital Equipment Corporation (DEC) introduced the VaxCluster. Until now, the topic of Real Application Clusters (RAC) implementation had never been fully explored. For the first time, Murali Vallath dissects RAC mysteries in his book Oracle Real Application Clusters to enlighten and educate readers on the internals of RAC operations, cache fusion, fusion recovery processes and the fast reconfiguration of RAC.
This book provides comprehensive coverage of the features, technology and principles of RAC that is part of the Oracle9i release of Oracle's RDBMS product. It is divided into three main parts: application/database design, development and maintenance life cycles.
Compared to its predecessor OPS, the architecture behind RAC implementation have changed significantly. Vallath discusses Oracle9i features in a RAC implementation with respect to usage and design considerations, as well as those parameters that are and are not applicable. Areas covered include partitioning, indexes, tablespace management, transaction management, backup and recovery principles. Performance tuning with examples, troubleshooting and problem solving scenarios are covered in detail, as well as discussions on the migration process from a single instance database to RAC and migration from an OPS implementation to RAC.
Oracle Real Application Clusters takes readers through a logical flow from RAC concepts to operations, covering each facet with a fine-tooth comb. Vallath's skilled writing style makes each chapter entertaining and informative as only a true RAC connoisseur can provide. New and experienced users of RAC, as well as those seeking to expand their knowledge of this dynamic technology, will find this book to be a necessity for both home and office reference libraries.

*Focuses on implementing, testing and tuning features of Real Application Clusters (RAC)
*Provides extensive coverage of usage, day-to-day functions and operations
*Includes tips and techniques such as script samples to illustrate various features of RAC
*Unravels the internals of RAC architecture Oracle 10g Data Warehousing is a guide to using the Data Warehouse features in the latest version of Oracle —Oracle Database 10g. Written by people on the Oracle development team that designed and implemented the code and by people with industry experience implementing warehouses using Oracle technology, this thoroughly updated and extended edition provides an insider’s view of how the Oracle Database 10g software is best used for your application.

It provides a detailed look at the new features of Oracle Database 10g and other Oracle products and how these are used in the data warehouse. This book will show you how to deploy the Oracle database and correctly use the new Oracle Database 10g features for your data warehouse. It contains walkthroughs and examples on how to use tools such as Oracle Discoverer and Reports to query the warehouse and generate reports that can be deployed over the web and gain better insight into your business.

This how-to guide provides step by step instructions including screen captures to make it easier to design, build and optimize performance of the data warehouse or data mart. It is a ‘must have’ reference for database developers, administrators and IT professionals who want to get to work now with all of the newest features of Oracle Database 10g.

It provides a detailed look at the new features of Oracle Database 10g and other Oracle products and how these are used in the data warehouse, including:
* How to use the Summary Management features, including Materialized Views and query rewrite, to best effect to radically improve query performance
* How to deploy business intelligence to the Web to satisfy today's changing and demanding business requirements
* Using Oracle OLAP and Data Mining options
* How to understand the warehouse hardware environment and how it is used by new features in the database including how to implement a high availability warehouse
environment
* Using the new management infrastructure in Oracle Database 10g and how this helps you to manage your warehouse environment Oracle 10g Data Warehousing is a guide to using the Data Warehouse features in the latest version of Oracle —Oracle Database 10g. Written by people on the Oracle development team that designed and implemented the code and by people with industry experience implementing warehouses using Oracle technology, this thoroughly updated and extended edition provides an insider's view of how the Oracle Database 10g software is best used for your application.It provides a detailed look at the new features of Oracle Database 10g and other Oracle products and how these are used in the data warehouse. This book will show you how to deploy the Oracle database and correctly use the new Oracle Database 10g features for your data warehouse. It contains walkthroughs and examples on how to use tools such as Oracle Discoverer and Reports to query the warehouse and generate reports that can be deployed over the web and gain better insight into your business.This how-to guide provides step by step instructions including screen captures to make it easier to design, build and optimize performance of the data warehouse or data mart. It is a ‘must have'reference for database developers, administrators and IT professionals who want to get to work now with all of the newest features of Oracle Database 10g.It provides a detailed look at the new features of Oracle Database 10g and other Oracle products and how these are used in the data warehouse How to use the Summary Management features, including Materialized Views and query rewrite, to best effect to radically improve query performance How to deploy business intelligence to the Web to satisfy today's changing and demanding business requirements Using Oracle OLAP and Data Mining options How to understand the warehouse hardware environment and how it is used by new features in the database including how to implement a high availability warehouse environment Using the new management infrastructure in Oracle Database 10g and how this helps you to manage your warehouse environment Clustered configuration first hit the scene nearly 20 years ago when Digital Equipment Corporation (DEC) introduced the VaxCluster. Until now, the topic of Real Application Clusters (RAC) implementation had never been fully explored. For the first time, Murali Vallath dissects RAC mysteries in his book Oracle Real Application Clusters to enlighten and educate readers on the internals of RAC operations, cache fusion, fusion recovery processes and the fast reconfiguration of RAC. This book provides comprehensive coverage of the features, technology and principles of RAC that is part of the Oracle9i release of Oracle's RDBMS product. It is divided into three main application/database design, development and maintenance life cycles. Compared to its predecessor OPS, the architecture behind RAC implementation have changed significantly. Vallath discusses Oracle9i features in a RAC implementation with respect to usage and design considerations, as well as those parameters that are and are not applicable. Areas covered include partitioning, indexes, tablespace management, transaction management, backup and recovery principles. Performance tuning with examples, troubleshooting and problem solving scenarios are covered in detail, as well as discussions on the migration process from a single instance database to RAC and migration from an OPS implementation to RAC. Oracle Real Application Clusters takes readers through a logical flow from RAC concepts to operations, covering each facet with a fine-tooth comb. Vallath's skilled writing style makes each chapter entertaining and informative as only a true RAC connoisseur can provide. New and experienced users of RAC, as well as those seeking to expand their knowledge of this dynamic technology, will find this book to be a necessity for both home and office reference libraries. Oracle9iR2 Data Warehousing is a guide to using the Data Warehouse features in the latest versions of Oracle -- Oracle 9i Release 1 and Release 2. Written by people on the Oracle development team that designed and implemented the code, this updated and expanded edition provides an insider's view of how the
Oracle 9i Release 2 software is best used for your application.

It provides a detailed look at a wide range of topics including:
· New techniques to facilitate the ETL process to transform data and load the warehouse
· How to use the Oracle OLAP and Data Mining options
· An entire chapter devoted to using materialized views to radically improve warehouse performance.

This book will show you how to use the Oracle database with tools such as Oracle Discoverer to query the warehouse, generate reports that can be deployed over the web, and gain better insight into your business.

This how-to guide provides step-by-step instructions including screen captures to make it easier to design, build, and optimize performance of the data warehouse or data mart. It is a ‘must have’ reference for database developers, administrators, and IT professionals who want to get to work now with all of the newest features in Oracle 9i Release 2.

· Based on 9i plus the improvements in Release 2
· Presents concepts with working examples
· Describes best practices and critical implementation tradeoffs, based on users' actual implementations

Audience: Oracle applications developers, Consultants; Trainers, Continuing education programs.

There are three parts to tuning an Oracle database: data modeling, SQL code tuning and physical database configuration.

A data model contains tables and relationships between tables. Tuning a data model involves normalization and de-normalization. Different approaches are required depending on the application, such as OLTP or a Data Warehouse. Inappropriate database design can make SQL code impossible to tune. Poor data modeling can have a most profound effect on database performance since all SQL code is constructed from the data model.

Poorly written SQL code is often a culprit of performance problems and is expensive to rectify. However, tuning of SQL code is generally cheaper than changing the data model. SQL code tends to be contained inside independent blocks within applications or stored procedures.

Physical database tuning involves hardware resource usage, networking and various other Oracle things such as configuration and file distribution. Physical configuration is often a culprit of poor performance where Oracle is installed with defaults, and never altered by an expert.

*Includes all three aspects of Oracle database tuning: data model tuning, SQL & PL/SQL code tuning, physical plus configuration tuning
*Contains experienced guidance and real-world examples using large datasets *Emphasizes development as opposed to operating system perspective Oracle 10g Data Warehousing is a guide to using the Data Warehouse features in the latest version of Oracle Oracle Database 10g. Written by people on the Oracle development team that designed and implemented the code and by people with industry experience implementing warehouses using Oracle technology, this thoroughly updated and extended edition provides an insiders view of how the Oracle Database 10g software is best used for your application. It provides a detailed look at the new features of Oracle Database 10g and other Oracle products and how these are used in the data warehouse. This book will show you how to deploy the Oracle database and correctly use the new Oracle Database 10g features for your data warehouse. It contains walkthroughs and examples on how to use tools such as Oracle Discoverer and Reports to query the warehouse and generate reports that can be deployed over the web and gain better insight into your business. This how-to guide provides step by step instructions including screen captures to make it easier to design, build and optimize performance of the data warehouse or data mart. It is a must have reference for database developers, administrators and IT professionals who want to get to work now with all of the newest features of Oracle Database 10g. It provides a detailed look at the new features of Oracle Database 10g and other Oracle products and how these are used in the data warehouse There are three parts to tuning an Oracle data modeling, SQL code tuning and physical database configuration. A data model contains tables and relationships between tables. Tuning a data model involves normalization and de-normalization. Different approaches are required depending on the application, such as OLTP or a Data Warehouse. Inappropriate database design can make SQL code impossible to tune. Poor data modeling can have a most profound effect on database performance since all SQL code is constructed from the data model. Poorly written SQL code is often a culprit of performance problems and is expensive to rectify. However, tuning of SQL code is generally cheaper than changing the data model. SQL code tends to be contained inside independent blocks within applications or stored procedures. Physical database tuning involves hardware resource usage, networking and various other Oracle things such as configuration and file distribution. Physical configuration is often a culprit of poor performance where Oracle is installed with defaults, and never altered by an expert. *Includes all three aspects of Oracle database data model tuning, SQL & PL/SQL code tuning, physical plus configuration tuning *Contains experienced guidance and real-world examples using large datasets *Emphasizes development as opposed to operating system perspective Cover......Page 1 Contents......Page 8 1 Getting Started......Page 20 2 Database Security within the General SecurityLandscape and a Defense-in-Depth Strategy......Page 54 3 The Database as a Networked Server......Page 80 4 Authentication and Password Security......Page 114 5 Application Security......Page 146 6 Using Granular Access Control......Page 196 7 Using the Database To Do Too Much......Page 222 8 Securing database-to-database communications......Page 252 9 Trojans......Page 286 10 Encryption......Page 316 11 Regulations and Compliance......Page 346 12 Auditing Categories......Page 368 13 Auditing Architectures......Page 394 Index......Page 416 Oracle9iR2 Data Warehousing is a comprehensive guide to using the Data Warehouse features in the very latest release of the Oracle database. Unlike other books which only include features in the initial release 9i, this book has been written by members of the Oracle development team who were actually involved in the design and implementation of some of these features. Since most users will probably upgrade to 9iR2 rather than 9i, this is the book to purchase to learn how to use all of the new features in this release Includes the three aspects of Oracle database tuning - data model tuning, SQL & PL/SQL code tuning, and physical as well as configuration tuning. This title contains guidance and real-world examples using large datasets. It emphasizes development as opposed to operating system perspective. -- Based on 9i R2 plus the fixes in R2-- Includes information from users' actual implementations, not just software features-- Complete and up to date feature sets with critical implementation issues One of the challenges of the post-dot-com bubble era that many organizations are facing is being asked to deliver more with little or no budget increase in order to improve the bottom line. "Since we published the first edition of this book, based on Oracle 8i, we've witnessed the rise and fall of the dot-coms and followed the ups and downs of the NASDAQ." Computer systems are central to the business strategy of any organization and are perhaps the most visible representation of the organization. Describing how to tune a relational database model would not be complete without a description of Normalization. Practical guide to RAC architecture for data base managers to manage Oracle9i clusters