Blog:Oracle 12c Architecture

Oracle 12c Architecture

PeteFinnigan:Oracle Database Password Security

Oracle Database Password Security

PeteFinnigan:Security Design For Your Database Applications

Security Design For Your Database Applications

Blog: Oracle 12c Password Hash

Describes the mechanism for hashing Oracle 12c passwords

Oracle Database In-Memory

A Survey of In-Memory Databases from SAP, Microsoft, IBM and Oracle

Oracle:OTNArchBeat
Youtube Channel with 2 minutes technical tips on all things Oracle, also added to the links section

Blog:Oracle DBA Scripts

Blog from DBA Cyrille Modiano On Oracle Database and DBA scripts

In Memory Database
Processing data in memory is faster and suppliers are pushing innovation to make in-memory
database technology cheaper and better.. more

ODAT: Oracle Database Attacking Tool – Direct Link

ODAT: Oracle Database Attacking Tool – Direct Link

ODAT:Oracle Database Attacking Tool – Test Oracle Database Security

ODAT (Oracle Database Attacking Tool) – Test Oracle Database Security

Integrigy:Blog - How Can Auditors use DBMS_SQLHASH

One use case for DBMS_SQLHASH is to help auditors trust-but-verify the actions of privileged users
such as database administrators. By hashing key tables an auditor can quickly determine if the
database administrator has made changes – either authorized or unauthorized.

Marcel Lambrechts:Oracle Security Blog

Marcel Lambrechts:Oracle Security Blog

David Litchfield:White Papers

White Papers on Oracle Security, Forensics by David Litchfield

Integrigy: Security Resources

Security resources for database and other Oracle products from Integrigy
Map of Public Vulnerability to Advisory/Alert
Maps publicly known security vulnerabilities to the Critical Patch Update Advisory or Security Alert
that addresses them.

Blog: Oracle Advanced Security

Oracle Advanced Security blog by Todd Bottger-Oracle

Integrigy: Security, Audit

Article on Oracle Security by Integrigy. Discusses default passwords, compares different checklists

Blog: Security, audit - Database Links

Database Links: A Definition in Plain English by Lewis Cunningham

Peasland Blog: Audit - CSV

Producing CSV output in SQL Developer by Peasland Database Blog

Ask Tom: Oracle Presentations

Oracle presentations by "Ask Tom"

Oak Table: Oracle news, articles

The OakTable network is a network for the Oracle scientist, who believes in better ways of
administering and developing Oracle based systems. The network is an informal organisation, which
will get together at various Oracle events.

Oracle-Base (Tim Hall) - Blog, scripts, articles, documentation

Blogs, scripts, articles, documentation from Oracle-Base (Tim Hall)

Oracle: Oracle Database 12c Release 1 (12.1) New Features

Oracle Database 12c Release 1 (12.1) New Features

Oracle: Oracle Database 12c Product Family

Oracle Database 12c Product Family

Redgate: Blogs
All Things Oracle from Redgate

Steve Karam: Blog, links

Oracle Blog by Steve Karam

PSOUG.org: Security, Code, papers, links

PSOUG.org is an Oracle community resource dedicated to supporting users and developers of the
Oracle database.

Morgans library: Security, Code, papers, links

On-line resource with code demos for DBAs and Developers

Onlinehashcrack: Security - Passwords

How to crack Oracle 11g Passwords (SHA1) - OnlineHashCrack.com

DBA-Village: Tips, scripts, papers

Oracle knowledge and information site by DBA-Village

Foundstone: Security - Blog

Top 10 Oracle Steps to a Secure Oracle Database Server by Chris Stark

Database Journal: Auditing

The Oracle Database Auditing Options by Database Journal

Oracle: Database Security Information

An attempt by Oracle to consolidate some of their key database security resources

Oracle: Security - Default passwords (11g)

List users with default passwords from Oracle 11g onwards

Oracle: Security, Audit - Main Site

Oracle's Database Security Site

Oracle: Security Webcasts

Oracle Database Security Webcasts by Oracle

IIA: Auditing, Security

Auditing Oracle Security by the Institue of Internal Auditors (IIA)

Oracle: Security, audit, baseline, checklist

A phased approach to securing database infrastructure by Oracle (Arup Nanda). Breaks Oracle
Security down to 4 phases of implementation

Pete Finnigan: Security - presentation

Oracle Security Presentation - Identity In The Database by Pete Finnigan

Oracle: Lifetime Support Policy

Oracle Lifetime Support Policy Oracle Technology Products

Dark Readings: Tools

Overview of 10 Free Database Security Tools by Dark Reading

Oracle: Security - Blog

Security Inside Out - Database Security blog by Oracle

Oracle: Security, Compliance

Oracle 12g Security and Compliance

Oracle: Security - Fine-Grained Access Control

Oracle Guide to Implementing Application Context and Fine-Grained Access Control

Oracle:Security - Transparent Data Encryption

Oracle Guide to Securing Stored Data Using Transparent Data Encryption

SANS:Security, audit, checklist, baseline

SANS Oracle Database Security Checklist - Prepared by Pete Finnigan

Oracle:Critical Patch Updates and Security Alerts

This page lists security patches, in the form of Critical Patch Updates (CPUs) and Security Alerts, that
Oracle has released.

Red Database:Security, audit, tools

Oracle security and audit scripts, white papers, tools etc from Red Database Security (Alexander
Kornbrust). Also password cracking tool and exploits.

Pete Finnigan:Security, audit, checklist, tools

Oracle security and audit scripts, white papers, tools etc from Pete Finnigan. List of Oracle default
passwords maintained

Security Focus:Security - Row Level

Articles by Pete Finnigan (for Security Focus) on the advantages of Oracle's row level security, what it
can be used for, and examples of how it works.

O Reilly Book:Security - Plan

Chapter 7 of the O'Reilly book on Oracle Database Security

Security Focus:Security - SQL Injection 2

This is the second part of a two-part article from Security Focus that will examine SQL injection
attacks against Oracle databases.

Security Focus:Security - SQL Injection 1

This is the first article in a two-part series from Security Focus that will examine SQL injection attacks
against Oracle databases.

yurichev.com:Security - passwrod cracker

Online Oracle Password Cracker by Dennis Yurichev Be careful while using as results are published to
all users.

WebSec:Security - SQL Injection

Knowledge Base put together is maintained by Roberto Salgado, Co-Founder of Websec. It is a

compilation of books, papers, cheatsheets and testing done by Roberto over the years. All around
SQL Injection.

OraNA

Read and monitor Oracle related blogs and news sources, all in one place.

oraclecommunity.net
Oracle communities, blogs etc