Enterprise Class APEX
Scott Spendolini
Executive Director
1
The following is intended to outline our general
product & services direction. It is intended for
information purposes onl...
WELCOME
3
About Enkitec
— Oracle Platinum Partner
— Established in 2004
— Headquartered in Dallas, TX
— Locations throughout the...
“Solutions for APEX Developers,
by APEX Developers”
5
Complete APEX Solutions
6
Services
ProductsEducation
Services
7
— One of the largest pool of experienced & totally
focused APEX resources in the world
— Many of whom are pre...
Education
8
X X X X X
X X X X X
X X X X X
Enkitec APEX Training
— Intro I
— Intro II
— Advanced APEX
— Secure Best Pra...
Education
9
Enkitec @ KScope
— Monday
— Making Sense of APEX Security
— Compelling, Dynamic, Graphical - And if We’re Lucky -
Usefu...
Enkitec @ KScope
— Wednesday
— LOBS, BLOBS, CLOBS - Dealing with Attachments in APEX
— Load Testing APEX Applications
—...
Products
12
— eFramework - Free Edition
— Basic user & role management
— eSERT
— APEX application that evaluates the s...
PLUG-INS
13
Plug-Ins
— Plug-Ins allow developers to extend the
capabilities of APEX itself
— Several different types:
— Item
— Reg...
Plug-Ins
— Plug-Ins are great additions to APEX
— However, they are inherently
complex and can fail for a
number of diff...
Enkitec Plug-In Support
16
Enkitec Plug-In Support
— Curated list of supported Plug-Ins and
corresponding APEX releases
— Two levels:
— Basic
— E...
Plug-In Support: Basic
18
— $999 annually per “production stream”
— E-Mail support with 2 business day response time
— ...
Plug-In Support: Enterprise
19
— $1999 annually per “production stream”
— E-Mail/Phone/Web support with 1 business day
r...
Supported Plug-Ins: Today
— CLOB Load
— NavBar
— Sparklines
— Modal LOV
— Calendar
20
Supported Plug-Ins: 2013
— Modal Page
— Session Timeout
— Save Before Exit
— Password
— File Upload
— And More!
21
Available Today
22
ESERT
23
eSERT
24
— eSERT is an APEX application that evaluates the
security of other APEX applications
— Provides step-by-step i...
— eSERT inspects APEX applications and reports on
threats in five classifications:
App Settings
Page Settings
SQL Injecti...
Ongoing Collaborative Evaluation
26
— eSERT allows developers to add exceptions for
false positives and acceptable risks
...
— Correcting each additional security vulnerability
may cause other functional issues
— Thus, a high number of vulnerabi...
With eSERT
28
2007 2009 Untitled 1Time
Vulnerabilities
— Using eSERT to keep security vulnerabilities to a
minimum reduce...
Customers Across All Industries
— Private Sector
— Multi-Channel Retailer
— Massive application with Over 300
Concurren...
Slidewww.oh-tech.orgwww.oh-tech.org
eSERT Testimonial
Jeff Smith, Application Infrastructure Manager
KSCOPE13, New Orleans...
Slidewww.oh-tech.org
Research & Innovation Center will operate, when opened, as the
proving grounds for next-generation te...
Slidewww.oh-tech.org
eSERT Testimonial
• Standards, Checks and Balances
• Developer Accountability and approval workflow
•...
Slidewww.oh-tech.orgwww.oh-tech.org
Questions
Jeff Smith
Application Infrastructure Manager
jsmith@oh-tech.org
Like Us on ...
D E M O N S T R A T I O N
ESERT
34
— Per “Production Stream”
— Up to 4 instances of APEX in a Production instance of APEX
— Any Number of Workspaces/Appli...
eSERT Statement of Direction
— Support for APEX 5.0
— Shortly after release
— Additional Reports & Analytics
— Schedul...
Available Today
37
ESERT CLOUD
38
eSERT Cloud
39
— eSERT cloud is a affordable hosted service where
anyone can upload their APEX applications and
get an in...
How it Works - 5 Simple Steps
1) Create an account at http://enkitec.com/sert
2) Request a workspace to upload your APEX
a...
How it Works - 5 4 Simple Steps
1) Create an account at http://enkitec.com/sert
2) Request a workspace to upload your APEX...
100% Free Starting Today
42
EFRAMEWORK
43
APEX Application Adoption
44
APEX Users
LDAP
Internet Users
SCOTT
SCOTT@GMAIL.COM
SCOTT.SPENDOLINI
Problem: User & Role Management
45
— Multiple user repositories
— Different applications manage roles differently
— Or ...
Problem: Too Much Access
46
— APEX instance administration console gives a user
complete access to the instance
— Users ...
Problem: Not Enough Access
47
— On the other hand, there are several commonly
needed management features that are not
ava...
Solution: Enkitec eFramework
48
— The Enkitec eFramework is an APEX-based
platform for deploying, managing & monitoring
m...
Requirements
— APEX 4.1 & 4.2
— Oracle Database 10gR2 or later
— SE One, SE or EE
49
Key Features
— User Repository Integration
— Discrete user-to-app or user-to-workspace
management
— Role Management
— ...
How it Integrates
— eFramework provides a set of APIs that can easily
and non-intrusively be integrated into existing
APE...
eFramework
How its Configured
52
Administration Management
Manage Application 100,101 & 102
Monitor all Applications in Wo...
eFramework Domain
How it Works
53
Launchpad Customer ApplicationsRepository
How We Use It
54
Enkitec Internal Apps
Launchpad STATSLDAP
Enkitec Public Website
Launchpad www.enkitec.comCustom
Oracle S...
D E M O N S T R A T I O N
EFRAMEWORK
55
Summary
56
— eFramework provides a robust development,
management & monitoring platform for multiple
APEX applications
—...
eFramework Statement of Direction
— Additional Reports & Analytics
— Integration with eSERT
— Alerts
— Enhanced Auditi...
Available July 2013
58
SUMMARY
59
“Solutions for APEX Developers,
by APEX Developers”
60
Complete APEX Solutions
61
Services
ProductsEducation
eFramework
Our Vision
62
eSERT
eQA
Manage & Monitor
Customer Apps
Development Production
Supported Plug-Ins
For More Info
63
— Contact us for details & pricing
— sales@enkitec.com
— +1 972 607 3751
— Visit our Booth in the Exh...
http://www.enkitec.com
64
Upcoming SlideShare
Loading in …5
×

Enterprise class apex

674 views

Published on

Published in: Technology
0 Comments
2 Likes
Statistics
Notes
  • Be the first to comment

No Downloads
Views
Total views
674
On SlideShare
0
From Embeds
0
Number of Embeds
30
Actions
Shares
0
Downloads
21
Comments
0
Likes
2
Embeds 0
No embeds

No notes for slide

Enterprise class apex

  1. 1. Enterprise Class APEX Scott Spendolini Executive Director 1
  2. 2. The following is intended to outline our general product & services direction. It is intended for information purposes only, and may not be incorporated into any contract or agreement. It is not a commitment to deliver any service, material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described for Enkitec’s products remains at the sole discretion of Enkitec. 2
  3. 3. WELCOME 3
  4. 4. About Enkitec — Oracle Platinum Partner — Established in 2004 — Headquartered in Dallas, TX — Locations throughout the US & EMEA — Specialties include: — Exadata Implementations — Development Services — PL/SQL / Java / APEX — DBA/Data Warehouse/RAC — Business Intelligence 4
  5. 5. “Solutions for APEX Developers, by APEX Developers” 5
  6. 6. Complete APEX Solutions 6 Services ProductsEducation
  7. 7. Services 7 — One of the largest pool of experienced & totally focused APEX resources in the world — Many of whom are presenting @ KScope this week!
  8. 8. Education 8 X X X X X X X X X X X X X X X Enkitec APEX Training — Intro I — Intro II — Advanced APEX — Secure Best Practices — Troubleshooting & Debugging — APEX Installation & Administration — Custom
  9. 9. Education 9
  10. 10. Enkitec @ KScope — Monday — Making Sense of APEX Security — Compelling, Dynamic, Graphical - And if We’re Lucky - Useful E-Mail Generation — APEX Behind the Scenes — Open Mic Night — Tuesday — Enterprise Class APEX — That’s Not Where I Want That! — Building Commercial Applications with APEX 10
  11. 11. Enkitec @ KScope — Wednesday — LOBS, BLOBS, CLOBS - Dealing with Attachments in APEX — Load Testing APEX Applications — Mastering the Oracle Data Pump — Thursday — Dynamic Action Deep Dive 1 — Dynamic Action Deep Dive 2 — Dynamic Action Deep Dive 3 11
  12. 12. Products 12 — eFramework - Free Edition — Basic user & role management — eSERT — APEX application that evaluates the security of other APEX applications — eSERT Cloud — Online version of eSERT
  13. 13. PLUG-INS 13
  14. 14. Plug-Ins — Plug-Ins allow developers to extend the capabilities of APEX itself — Several different types: — Item — Region — Process — Dynamic Action — Authorization Schemes — Authentication Schemes 14
  15. 15. Plug-Ins — Plug-Ins are great additions to APEX — However, they are inherently complex and can fail for a number of different reasons: — APEX Upgrade — Browser Upgrade — Code Changes — jQuery Issues — Most failures cannot easily or efficiently be addressed by the average APEX developer 15
  16. 16. Enkitec Plug-In Support 16
  17. 17. Enkitec Plug-In Support — Curated list of supported Plug-Ins and corresponding APEX releases — Two levels: — Basic — Enterprise — Enkitec Plug-Ins will continue to be provided at no cost for anyone via www.enkitec.com 17
  18. 18. Plug-In Support: Basic 18 — $999 annually per “production stream” — E-Mail support with 2 business day response time — Receive releases and updates ahead of public — Access to Forums
  19. 19. Plug-In Support: Enterprise 19 — $1999 annually per “production stream” — E-Mail/Phone/Web support with 1 business day response time — Receive releases and updates ahead of public — Access to Forums — Monthly Call with Enkitec APEX Developers — Prioritized Feature Requests
  20. 20. Supported Plug-Ins: Today — CLOB Load — NavBar — Sparklines — Modal LOV — Calendar 20
  21. 21. Supported Plug-Ins: 2013 — Modal Page — Session Timeout — Save Before Exit — Password — File Upload — And More! 21
  22. 22. Available Today 22
  23. 23. ESERT 23
  24. 24. eSERT 24 — eSERT is an APEX application that evaluates the security of other APEX applications — Provides step-by-step instructions on how to address vulnerabilities — Designed to be used as a part of your development process, not at the end — Total integration with the APEX development environment — Collaborate with all APEX developers
  25. 25. — eSERT inspects APEX applications and reports on threats in five classifications: App Settings Page Settings SQL Injection Cross Site Scripting URL Tampering Classifications 25
  26. 26. Ongoing Collaborative Evaluation 26 — eSERT allows developers to add exceptions for false positives and acceptable risks — All exceptions must be reviewed & approved by a manager before the “approved” score increases — As exceptions are logged, the value of the attribute in question is also captured — If this value changes at any time, the exception will be instantly flagged as “stale” and require re-approval
  27. 27. — Correcting each additional security vulnerability may cause other functional issues — Thus, a high number of vulnerabilities corrected at once will yield more functional defects Without eSERT 27 2007 2008 2009 Untitled 1Untitled 2Time Vulnerabilities
  28. 28. With eSERT 28 2007 2009 Untitled 1Time Vulnerabilities — Using eSERT to keep security vulnerabilities to a minimum reduces the number of functional defects introduced
  29. 29. Customers Across All Industries — Private Sector — Multi-Channel Retailer — Massive application with Over 300 Concurrent Users — Major Defense Contractor — Hundreds of applications — Major Healthcare Provider — Infrastructure Management — Higher Education — Multiple Major Universities — Access to student & research information — Public Sector — Intelligence Agency — Over 100 internal applications — Local Government — Internal Applications — Civilian Agency — Internet Facing e-Commerce Application — DOD Agency — Logistical Reports & Info 29
  30. 30. Slidewww.oh-tech.orgwww.oh-tech.org eSERT Testimonial Jeff Smith, Application Infrastructure Manager KSCOPE13, New Orleans 6/25/2013
  31. 31. Slidewww.oh-tech.org Research & Innovation Center will operate, when opened, as the proving grounds for next-generation technology infrastructure innovations and a catalyst for cutting-edge research and collaboration. The OH-TECH Consortium Ohio Supercomputer Center provides high performance computing, software, storage and support services for Ohio’s scientists, faculty, students, businesses and their research partners. OARnet connects Ohio’s universities, colleges, K-12, health care and state and local governments to its high-speed fiber optic network backbone. OARnet services include co-location, support desk, federated identity and virtualization. OhioLINK serves nearly 600,000 higher education students and faculty by providing a statewide system for sharing 50 million books and library materials, while aggregating costs among its 90 member institutions. eStudent Services provides students increased access to higher education through e-learning and technology-enhanced educational opportunities, including virtual tutoring.
  32. 32. Slidewww.oh-tech.org eSERT Testimonial • Standards, Checks and Balances • Developer Accountability and approval workflow • Efficiency and Productivity • Audit compliance • Outsourcing Development • Support
  33. 33. Slidewww.oh-tech.orgwww.oh-tech.org Questions Jeff Smith Application Infrastructure Manager jsmith@oh-tech.org Like Us on Facebook: https://www.facebook.com/ OhioTechnologyConsortium 1224 Kinnear Road Columbus, OH 43212 Phone: (614) 292-9248
  34. 34. D E M O N S T R A T I O N ESERT 34
  35. 35. — Per “Production Stream” — Up to 4 instances of APEX in a Production instance of APEX — Any Number of Workspaces/Applications/Users Licensing 35 DEV QA ProductionTEST
  36. 36. eSERT Statement of Direction — Support for APEX 5.0 — Shortly after release — Additional Reports & Analytics — Scheduled Evaluation Enhancements — Team Development Integration — eFramework Integration 36
  37. 37. Available Today 37
  38. 38. ESERT CLOUD 38
  39. 39. eSERT Cloud 39 — eSERT cloud is a affordable hosted service where anyone can upload their APEX applications and get an instant security evaluation via eSERT — Interactive Online Dashboard with summary results — PDF Summary Report (typically 100+ pages)
  40. 40. How it Works - 5 Simple Steps 1) Create an account at http://enkitec.com/sert 2) Request a workspace to upload your APEX applications into 3) Purchase evaluation credits (1 credit = 1 application evaluation) 4) Select an application to evaluate 5) View and/or download the results 40
  41. 41. How it Works - 5 4 Simple Steps 1) Create an account at http://enkitec.com/sert 2) Request a workspace to upload your APEX applications into 3) Purchase evaluation credits (1 credit = 1 application evaluation) 4) Select an application to evaluate 5) View and/or download the results 41
  42. 42. 100% Free Starting Today 42
  43. 43. EFRAMEWORK 43
  44. 44. APEX Application Adoption 44 APEX Users LDAP Internet Users SCOTT SCOTT@GMAIL.COM SCOTT.SPENDOLINI
  45. 45. Problem: User & Role Management 45 — Multiple user repositories — Different applications manage roles differently — Or not at all... — Lack of auditing when managing and/or assigning roles — Especially in home-grown systems — No central view of what applications & roles a single user has access to
  46. 46. Problem: Too Much Access 46 — APEX instance administration console gives a user complete access to the instance — Users with access to this can: — Create or Delete Workspaces — Create or Delete Schemas — Assign a Developer to Any Workspace — Alter the instance options and security settings — Approve Requests — Monitor Usage — Deploying in Runtime Mode makes even this option unusable
  47. 47. Problem: Not Enough Access 47 — On the other hand, there are several commonly needed management features that are not available from the APEX admin console — Manage User Repositories — Manage Users & Roles — Enable/Disable an Application — Secure Pages with Roles — Manage Application Help — View Errors — View Feedback
  48. 48. Solution: Enkitec eFramework 48 — The Enkitec eFramework is an APEX-based platform for deploying, managing & monitoring multiple APEX applications — Provides a central Management & Monitoring console that can be discretely delegated to any user — On either an application or workspace basis
  49. 49. Requirements — APEX 4.1 & 4.2 — Oracle Database 10gR2 or later — SE One, SE or EE 49
  50. 50. Key Features — User Repository Integration — Discrete user-to-app or user-to-workspace management — Role Management — Page Security — Centralized Help — Monitoring Reports & Charts — Error Management — Auditing — Application Control 50
  51. 51. How it Integrates — eFramework provides a set of APIs that can easily and non-intrusively be integrated into existing APEX applications — Configuration Typically less than 5 minutes per application — Built-in Verification Tool to assist with integration 51 • Application Item • Page Zero Region • Error Handling Call • Authentication Scheme • Authorization Scheme(s) • PL/SQL Init & Cleanup • Navigation Bar Entries • Label Templates
  52. 52. eFramework How its Configured 52 Administration Management Manage Application 100,101 & 102 Monitor all Applications in Workspace PROD Manage Help Text in Application 100 Equivalent to APEX Instance Administrator Customer Applications
  53. 53. eFramework Domain How it Works 53 Launchpad Customer ApplicationsRepository
  54. 54. How We Use It 54 Enkitec Internal Apps Launchpad STATSLDAP Enkitec Public Website Launchpad www.enkitec.comCustom Oracle Sales Portal Launchpad Sales ForecastCustom Data Shadow Shadow Single APEX Workspace
  55. 55. D E M O N S T R A T I O N EFRAMEWORK 55
  56. 56. Summary 56 — eFramework provides a robust development, management & monitoring platform for multiple APEX applications — Can be integrated with any user repository — Provides a federated view of all APEX application activity and associated access controls — Simple to integrate with existing APEX applications
  57. 57. eFramework Statement of Direction — Additional Reports & Analytics — Integration with eSERT — Alerts — Enhanced Auditing Capabilities 57
  58. 58. Available July 2013 58
  59. 59. SUMMARY 59
  60. 60. “Solutions for APEX Developers, by APEX Developers” 60
  61. 61. Complete APEX Solutions 61 Services ProductsEducation
  62. 62. eFramework Our Vision 62 eSERT eQA Manage & Monitor Customer Apps Development Production Supported Plug-Ins
  63. 63. For More Info 63 — Contact us for details & pricing — sales@enkitec.com — +1 972 607 3751 — Visit our Booth in the Exhibition Hall
  64. 64. http://www.enkitec.com 64

×