The document discusses a layered security defense model consisting of silicon, infrastructure, database, middleware and applications layers. Each layer provides security controls to protect data and communications, with the silicon layer securing data in memory and the applications layer providing controls like role-based access and single sign-on across apps.

1. Copyright © 2016, Oracle and/or its affiliates. All rights reserved.
Layered Security
Defense

2. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. 2
Security in silicon provides a
protective foundation for the
overlying software, including
securing data in memory from
corruption and attack.
Silicon Layer

3. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. 3
Enable dynamic firewalls
for unrestricted yet secure
communications among virtual
machines, creating fine-grained
network access controls across
the compute environment.
Infrastructure Layer

4. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. 4
Build preventive and detective
security controls into the
database, including encryption,
redaction, privileged user
controls, and auditing.
Database Layer

5. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. 5
Use the middleware layer
as a centralized access and
authentication platform for
users and systems; enabled
across SaaS, PaaS, and IaaS.
Middleware Layer

6. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. 6
Add further security controls
at this layer, including role-
based access, redaction, and
single sign-on across multiple
applications.
Applications Layer

7. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. 7
Layered Security Defense
Silicon
Infrastructure
Database
Middleware
Applications