Analysis of Threats and Vulnerabilities of DBMS Oracle
The article describes the main types of external and internal attacks on the database management system (DBMS) Oracle. Analysis of possible consequences of these attacks, and the vulnerability assessment of Oracle database various security vulnerabilities and threats. Among the external attacks are attacks on lisener, attacks through applications and connect to the DBMS directly. Among external attacks are considered PL/SQL injection, SQL injection, bypass the security procedures DBMS_ASSERT, the overflow buffet, as well as incorrect operation of associations and perceptions. The article describes the basic requirements for information security database and the main tasks of the administrator. Based on the analysis, it is concluded that the use of additional security measures is necessary. The authors recommend using the technology of operational audit, which is a small auxiliary key to obtain data on the current state of the system. This technology makes it possible to protect the database from unauthorized actions, to track certain actions, to analyze data access the article discusses the advantages and disadvantages of using audit technology. This technology is an important part of an integrated approach to the organization of the information security system in the enterprise.