The document discusses defending data in the cloud through monitoring and auditing. It notes that cloud adoption is increasing as data grows, but security concerns are the top priority for customers. The presentation recommends using preventative measures like encryption, and detective controls like activity monitoring and auditing to comply with regulations and detect threats like fraudulent data migration or SQL injection attacks. Case studies show how companies implement Oracle's database security solutions to address their compliance and risk management needs.

1. Defending the Cloud with
Monitoring and Auditing
Eva Chang
Senior Sales Consultant

2. Agenda
 Data growth and cloud adoption
 Data governance and risk management
 Detect fraudulent data migration
 Monitor data moving to and within the cloud
 Report to address regulatory compliance
2
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

3. 3
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

4. DVDs
Stacked to the
moon
4
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

5. 80% protected
by Enterprises
5
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
And back

6. Data in the Cloud
The Digital Universe in the Cloud Will Increase 20% by 2020
Not touched
by cloud
Stored or
touched
17%
2012
37%
2020
6
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
Source: IDC Digital Universe Study

7. Security: Top of Mind for Customers
Only thing trending
higher than the cloud?
Security concerns about
the cloud…
82%
54%
#1
Risk
7
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
Concerned about cloud
security & privacy
Worried about a cloud
provider data breach
Undetected data breach

8. Cloud Security Spend Increasing
20% of IT
budget by
2016
Source: Gartner
8
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

9. Database Security Strategy
Defense-in-Depth for Maximum Security
PREVENTIVE
DETECTIVE
ADMINISTRATIVE
Encryption
Activity Monitoring
Privilege Analysis
Redaction and Masking
Database Firewall
Sensitive Data Discovery
Privileged User Controls
Auditing and Reporting
Configuration Management
9
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

10. 10
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

11. Oracle Database Security Solutions
Defense-in-Depth for Maximum Security
PREVENTIVE
DETECTIVE
ADMINISTRATIVE
Encryption
Activity Monitoring
Privilege Analysis
Redaction and Masking
Database Firewall
Sensitive Data Discovery
Privileged User Controls
Auditing and Reporting
Configuration Management
11
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

12. Data Governance
Reporting for
Compliance
Data Migration
Cloud Data
Movement
12
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

13. Data Governance and Risk Management
Policies and Procedures for Managing Information Usage
Opportunity
LOB
IT
Risk
13
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

14. 14
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

15. DoR employee
Phishing email malware
8/29 used passwords to
access 6 servers
9/1-2 Installed malicious
backdoor and accessed
22 servers
Malware stole
Username password
9/12 Copied database backup files
to a staging directory
10/19-20 DoR remediates after being
notified of breach by 3rd party
Aug/Sep 2012
8/27 Attacker logs
into remote access service w/
credentials
Executed utilities designed to
obtain user account passwords
(six servers)
15
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
9/13 Exfiltrated tax
records since ‘98:
3.8m individuals
$12 million in associated costs
Jeopardized governor’s re-election
1-year credit-monitoring & ID theft protection 800,000

16. Detect Fraudulent Data Migration
Database Auditing
 Monitor for large internal data migrations in
existing environments
 Audit all databases for privilege user data access
 Automate continual auditing of sensitive data
16
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

17. T-Mobile
Monitors Data Exfiltration in Oracle and non-Oracle Databases
Solution
Provider of wireless voice,
messaging, and data
services throughout the U.S.
Fourth largest wireless
company in the U.S. with
more than 35 million
subscribers
Industry: Telecom
17
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
 Addresses data security with Database
Firewall, TDE, Data Masking as comprehensive
database security defense-in-depth strategy
 Database activity monitoring prevents insider
and external threats
 Deployed and setup within a few hours; already
protected against a few compromised accounts
that were harvesting data

18. Monitor Data Moving To and Within the Cloud
Database Activity Monitoring and SQL Injection Prevention
 Monitor database and system activity
– Increase traffic visibility
 Prevent database threats
– SQL injection attacks and privilege escalation
 Detect application by-pass and data harvesting
18
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

19. SquareTwo Financial
Prevents Database Threats Including SQL Injection Attacks
Solution
Leader in $100 billion asset
recovery and management
industry
Partner Network used by
Fortune 500 companies in
banking, credit card, and
health care
Industry: Financial Services
19
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
 Addresses compliance with Database Firewall,
TDE, Data Masking as comprehensive
database security defense-in-depth strategy
 Database activity monitoring to protect against
insider and external threats, including SQL
injection attacks
 Securing Exadata and SQL Server databases

20. Address Regulatory Compliance
Reporting and Alerting
 Comply with regulations
– GLBA, HIPAA, SOX, PCI and more
 Alert in real-time to prevent further compromise
 Collect, consolidate audit trails and system logs
20
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

21. TransUnion Interactive
Addresses PCI DSS Compliance
Solution
Consumer subsidiary of
TransUnion, a global leader
in credit information
Maintains credit histories on
over 500 million consumers
globally
Industry: Financial Services
21
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
 Deployed Database Firewall in one month to
monitor database traffic
 Achieved 10k transactions/sec while
maintaining performance
 Using reports to monitor traffic and manage
workloads and capacity
 Additional: Oracle Advanced Security to
encrypt tablespaces

22. Oracle Audit Vault and Database Firewall
Database Firewall
APP
S
Firewall
Events
Alerts
!
Built-in Reports
AUDIT
DATA
Custom Reports
Policies
AUDIT VAULT
22
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
Custom

23. For More Information
Oracle Audit Vault and Database Firewall
23
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

24. Complimentary eBook
Register Now
www.mhprofessional.com/dbsec
Use Code: db12c
24
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

25. Q&A
25
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

26. 26
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.