Submit Search
Upload
Dan Norris: Exadata security
•
6 likes
•
1,803 views
Kyle Hailey
Follow
Dan Norris: Exadata security
Read less
Read more
Internet
Report
Share
Report
Share
1 of 30
Download now
Download to read offline
Recommended
Oaktable World 2014 Kevin Closson: SLOB – For More Than I/O!
Oaktable World 2014 Kevin Closson: SLOB – For More Than I/O!
Kyle Hailey
Mark Farnam : Minimizing the Concurrency Footprint of Transactions
Mark Farnam : Minimizing the Concurrency Footprint of Transactions
Kyle Hailey
Oracle Open World 2014: Lies, Damned Lies, and I/O Statistics [ CON3671]
Oracle Open World 2014: Lies, Damned Lies, and I/O Statistics [ CON3671]
Kyle Hailey
Delphix for DBAs by Jonathan Lewis
Delphix for DBAs by Jonathan Lewis
Kyle Hailey
Data Virtualization: Revolutionizing data cloning
Data Virtualization: Revolutionizing data cloning
Kyle Hailey
Delphix
Delphix
Dealmaker Media
Christo kutrovsky oracle rac solving common scalability problems
Christo kutrovsky oracle rac solving common scalability problems
Christo Kutrovsky
Delphix Workflow for SQL Server
Delphix Workflow for SQL Server
rcaccia
Recommended
Oaktable World 2014 Kevin Closson: SLOB – For More Than I/O!
Oaktable World 2014 Kevin Closson: SLOB – For More Than I/O!
Kyle Hailey
Mark Farnam : Minimizing the Concurrency Footprint of Transactions
Mark Farnam : Minimizing the Concurrency Footprint of Transactions
Kyle Hailey
Oracle Open World 2014: Lies, Damned Lies, and I/O Statistics [ CON3671]
Oracle Open World 2014: Lies, Damned Lies, and I/O Statistics [ CON3671]
Kyle Hailey
Delphix for DBAs by Jonathan Lewis
Delphix for DBAs by Jonathan Lewis
Kyle Hailey
Data Virtualization: Revolutionizing data cloning
Data Virtualization: Revolutionizing data cloning
Kyle Hailey
Delphix
Delphix
Dealmaker Media
Christo kutrovsky oracle rac solving common scalability problems
Christo kutrovsky oracle rac solving common scalability problems
Christo Kutrovsky
Delphix Workflow for SQL Server
Delphix Workflow for SQL Server
rcaccia
Kscope 2013 delphix
Kscope 2013 delphix
Kyle Hailey
Transforming IT Infrastructure
Transforming IT Infrastructure
tim_evdbt
Oracle Exadata Performance: Latest Improvements and Less Known Features
Oracle Exadata Performance: Latest Improvements and Less Known Features
Tanel Poder
Jonathan Lewis explains Delphix
Jonathan Lewis explains Delphix
Kyle Hailey
Advanced Oracle Troubleshooting
Advanced Oracle Troubleshooting
Hector Martinez
VMworld 2016: vSphere 6.x Host Resource Deep Dive
VMworld 2016: vSphere 6.x Host Resource Deep Dive
VMworld
Tanel Poder - Troubleshooting Complex Oracle Performance Issues - Part 1
Tanel Poder - Troubleshooting Complex Oracle Performance Issues - Part 1
Tanel Poder
Long live to CMAN!
Long live to CMAN!
Ludovico Caldara
Oracle Drivers configuration for High Availability
Oracle Drivers configuration for High Availability
Ludovico Caldara
OGG Architecture Performance
OGG Architecture Performance
Enkitec
Looking at RAC, GI/Clusterware Diagnostic Tools
Looking at RAC, GI/Clusterware Diagnostic Tools
Leighton Nelson
VMworld 2016: Getting Started with PowerShell and PowerCLI for Your VMware En...
VMworld 2016: Getting Started with PowerShell and PowerCLI for Your VMware En...
VMworld
VMworld 2013: vSphere Data Protection (VDP) Technical Deep Dive and Troublesh...
VMworld 2013: vSphere Data Protection (VDP) Technical Deep Dive and Troublesh...
VMworld
VMworld 2015: The Future of Software- Defined Storage- What Does it Look Like...
VMworld 2015: The Future of Software- Defined Storage- What Does it Look Like...
VMworld
Jurijs Velikanovs - RAC Attack 101 - How to install 12c RAC on your laptop
Jurijs Velikanovs - RAC Attack 101 - How to install 12c RAC on your laptop
Andrejs Vorobjovs
Oracle Database on Docker
Oracle Database on Docker
Franck Pachot
tow nodes Oracle 12c RAC on virtualbox
tow nodes Oracle 12c RAC on virtualbox
justinit
VMworld 2016: Enforcing a vSphere Cluster Design with PowerCLI Automation
VMworld 2016: Enforcing a vSphere Cluster Design with PowerCLI Automation
VMworld
Become a MySQL DBA - slides: Deciding on a relevant backup solution
Become a MySQL DBA - slides: Deciding on a relevant backup solution
Severalnines
Oracle Drivers configuration for High Availability, is it a developer's job?
Oracle Drivers configuration for High Availability, is it a developer's job?
Ludovico Caldara
DevOps and its impact
DevOps and its impact
Cisco DevNet
OakTable World Sep14 clonedb
OakTable World Sep14 clonedb
Connor McDonald
More Related Content
What's hot
Kscope 2013 delphix
Kscope 2013 delphix
Kyle Hailey
Transforming IT Infrastructure
Transforming IT Infrastructure
tim_evdbt
Oracle Exadata Performance: Latest Improvements and Less Known Features
Oracle Exadata Performance: Latest Improvements and Less Known Features
Tanel Poder
Jonathan Lewis explains Delphix
Jonathan Lewis explains Delphix
Kyle Hailey
Advanced Oracle Troubleshooting
Advanced Oracle Troubleshooting
Hector Martinez
VMworld 2016: vSphere 6.x Host Resource Deep Dive
VMworld 2016: vSphere 6.x Host Resource Deep Dive
VMworld
Tanel Poder - Troubleshooting Complex Oracle Performance Issues - Part 1
Tanel Poder - Troubleshooting Complex Oracle Performance Issues - Part 1
Tanel Poder
Long live to CMAN!
Long live to CMAN!
Ludovico Caldara
Oracle Drivers configuration for High Availability
Oracle Drivers configuration for High Availability
Ludovico Caldara
OGG Architecture Performance
OGG Architecture Performance
Enkitec
Looking at RAC, GI/Clusterware Diagnostic Tools
Looking at RAC, GI/Clusterware Diagnostic Tools
Leighton Nelson
VMworld 2016: Getting Started with PowerShell and PowerCLI for Your VMware En...
VMworld 2016: Getting Started with PowerShell and PowerCLI for Your VMware En...
VMworld
VMworld 2013: vSphere Data Protection (VDP) Technical Deep Dive and Troublesh...
VMworld 2013: vSphere Data Protection (VDP) Technical Deep Dive and Troublesh...
VMworld
VMworld 2015: The Future of Software- Defined Storage- What Does it Look Like...
VMworld 2015: The Future of Software- Defined Storage- What Does it Look Like...
VMworld
Jurijs Velikanovs - RAC Attack 101 - How to install 12c RAC on your laptop
Jurijs Velikanovs - RAC Attack 101 - How to install 12c RAC on your laptop
Andrejs Vorobjovs
Oracle Database on Docker
Oracle Database on Docker
Franck Pachot
tow nodes Oracle 12c RAC on virtualbox
tow nodes Oracle 12c RAC on virtualbox
justinit
VMworld 2016: Enforcing a vSphere Cluster Design with PowerCLI Automation
VMworld 2016: Enforcing a vSphere Cluster Design with PowerCLI Automation
VMworld
Become a MySQL DBA - slides: Deciding on a relevant backup solution
Become a MySQL DBA - slides: Deciding on a relevant backup solution
Severalnines
Oracle Drivers configuration for High Availability, is it a developer's job?
Oracle Drivers configuration for High Availability, is it a developer's job?
Ludovico Caldara
What's hot
(20)
Kscope 2013 delphix
Kscope 2013 delphix
Transforming IT Infrastructure
Transforming IT Infrastructure
Oracle Exadata Performance: Latest Improvements and Less Known Features
Oracle Exadata Performance: Latest Improvements and Less Known Features
Jonathan Lewis explains Delphix
Jonathan Lewis explains Delphix
Advanced Oracle Troubleshooting
Advanced Oracle Troubleshooting
VMworld 2016: vSphere 6.x Host Resource Deep Dive
VMworld 2016: vSphere 6.x Host Resource Deep Dive
Tanel Poder - Troubleshooting Complex Oracle Performance Issues - Part 1
Tanel Poder - Troubleshooting Complex Oracle Performance Issues - Part 1
Long live to CMAN!
Long live to CMAN!
Oracle Drivers configuration for High Availability
Oracle Drivers configuration for High Availability
OGG Architecture Performance
OGG Architecture Performance
Looking at RAC, GI/Clusterware Diagnostic Tools
Looking at RAC, GI/Clusterware Diagnostic Tools
VMworld 2016: Getting Started with PowerShell and PowerCLI for Your VMware En...
VMworld 2016: Getting Started with PowerShell and PowerCLI for Your VMware En...
VMworld 2013: vSphere Data Protection (VDP) Technical Deep Dive and Troublesh...
VMworld 2013: vSphere Data Protection (VDP) Technical Deep Dive and Troublesh...
VMworld 2015: The Future of Software- Defined Storage- What Does it Look Like...
VMworld 2015: The Future of Software- Defined Storage- What Does it Look Like...
Jurijs Velikanovs - RAC Attack 101 - How to install 12c RAC on your laptop
Jurijs Velikanovs - RAC Attack 101 - How to install 12c RAC on your laptop
Oracle Database on Docker
Oracle Database on Docker
tow nodes Oracle 12c RAC on virtualbox
tow nodes Oracle 12c RAC on virtualbox
VMworld 2016: Enforcing a vSphere Cluster Design with PowerCLI Automation
VMworld 2016: Enforcing a vSphere Cluster Design with PowerCLI Automation
Become a MySQL DBA - slides: Deciding on a relevant backup solution
Become a MySQL DBA - slides: Deciding on a relevant backup solution
Oracle Drivers configuration for High Availability, is it a developer's job?
Oracle Drivers configuration for High Availability, is it a developer's job?
Viewers also liked
DevOps and its impact
DevOps and its impact
Cisco DevNet
OakTable World Sep14 clonedb
OakTable World Sep14 clonedb
Connor McDonald
Indexes: Structure, Splits and Free Space Management Internals
Indexes: Structure, Splits and Free Space Management Internals
Christian Antognini
Profiling the logwriter and database writer
Profiling the logwriter and database writer
Kyle Hailey
OakTable World 2015 - Using XMLType content with the Oracle In-Memory Column...
OakTable World 2015 - Using XMLType content with the Oracle In-Memory Column...
Marco Gralike
ARC202 Architecting for High Availability - AWS re: Invent 2012
ARC202 Architecting for High Availability - AWS re: Invent 2012
Amazon Web Services
Intro to ASH
Intro to ASH
Kyle Hailey
Ash masters : advanced ash analytics on Oracle
Ash masters : advanced ash analytics on Oracle
Kyle Hailey
How to find and fix your Oracle application performance problem
How to find and fix your Oracle application performance problem
Cary Millsap
Oracle Open World Thursday 230 ashmasters
Oracle Open World Thursday 230 ashmasters
Kyle Hailey
AWR Ambiguity: Performance reasoning when the numbers don't add up
AWR Ambiguity: Performance reasoning when the numbers don't add up
John Beresniewicz
Data control
Data control
Kyle Hailey
Oaktable World 2014 Toon Koppelaars: database constraints polite excuse
Oaktable World 2014 Toon Koppelaars: database constraints polite excuse
Kyle Hailey
Oracle Database on ACFS: a perfect marriage?
Oracle Database on ACFS: a perfect marriage?
Ludovico Caldara
Oracle Database Security: Top 10 Things You Could & Should Be Doing Differently
Oracle Database Security: Top 10 Things You Could & Should Be Doing Differently
Pythian
Worst Practices in Data Warehouse Design
Worst Practices in Data Warehouse Design
Kent Graziano
Introducing the eDB360 Tool
Introducing the eDB360 Tool
Carlos Sierra
Christo kutrovsky oracle, memory & linux
Christo kutrovsky oracle, memory & linux
Kyle Hailey
DBaaS- Database as a Service in a DBAs World
DBaaS- Database as a Service in a DBAs World
Kellyn Pot'Vin-Gorman
Getting Started with Managed Database Services on AWS
Getting Started with Managed Database Services on AWS
Amazon Web Services
Viewers also liked
(20)
DevOps and its impact
DevOps and its impact
OakTable World Sep14 clonedb
OakTable World Sep14 clonedb
Indexes: Structure, Splits and Free Space Management Internals
Indexes: Structure, Splits and Free Space Management Internals
Profiling the logwriter and database writer
Profiling the logwriter and database writer
OakTable World 2015 - Using XMLType content with the Oracle In-Memory Column...
OakTable World 2015 - Using XMLType content with the Oracle In-Memory Column...
ARC202 Architecting for High Availability - AWS re: Invent 2012
ARC202 Architecting for High Availability - AWS re: Invent 2012
Intro to ASH
Intro to ASH
Ash masters : advanced ash analytics on Oracle
Ash masters : advanced ash analytics on Oracle
How to find and fix your Oracle application performance problem
How to find and fix your Oracle application performance problem
Oracle Open World Thursday 230 ashmasters
Oracle Open World Thursday 230 ashmasters
AWR Ambiguity: Performance reasoning when the numbers don't add up
AWR Ambiguity: Performance reasoning when the numbers don't add up
Data control
Data control
Oaktable World 2014 Toon Koppelaars: database constraints polite excuse
Oaktable World 2014 Toon Koppelaars: database constraints polite excuse
Oracle Database on ACFS: a perfect marriage?
Oracle Database on ACFS: a perfect marriage?
Oracle Database Security: Top 10 Things You Could & Should Be Doing Differently
Oracle Database Security: Top 10 Things You Could & Should Be Doing Differently
Worst Practices in Data Warehouse Design
Worst Practices in Data Warehouse Design
Introducing the eDB360 Tool
Introducing the eDB360 Tool
Christo kutrovsky oracle, memory & linux
Christo kutrovsky oracle, memory & linux
DBaaS- Database as a Service in a DBAs World
DBaaS- Database as a Service in a DBAs World
Getting Started with Managed Database Services on AWS
Getting Started with Managed Database Services on AWS
Similar to Dan Norris: Exadata security
Maximizing Oracle RAC Uptime
Maximizing Oracle RAC Uptime
Markus Michalewicz
Cloud Platform Symantec Meetup Nov 2014
Cloud Platform Symantec Meetup Nov 2014
Miguel Zuniga
2014 OpenSuse Conf: Protect your MySQL Server
2014 OpenSuse Conf: Protect your MySQL Server
Georgi Kodinov
EM12C High Availability without SLB and RAC
EM12C High Availability without SLB and RAC
Secure-24
Zero to Manageability in 60 Minutes: Building a Solid Foundation for Oracle E...
Zero to Manageability in 60 Minutes: Building a Solid Foundation for Oracle E...
Courtney Llamas
MySQL Manchester TT - Performance Tuning
MySQL Manchester TT - Performance Tuning
Mark Swarbrick
Apache cassandra v4.0
Apache cassandra v4.0
Yuki Morishita
Splunk: Forward me the REST of those shells
Splunk: Forward me the REST of those shells
Anthony D Hendricks
Security of Oracle EBS - How I can Protect my System (UKOUG APPS 18 edition)
Security of Oracle EBS - How I can Protect my System (UKOUG APPS 18 edition)
Andrejs Prokopjevs
Cuc pcd tac_toi
Cuc pcd tac_toi
Michael Ganschuk
OUGLS 2016: How profiling works in MySQL
OUGLS 2016: How profiling works in MySQL
Georgi Kodinov
Best practices in Deploying SUSE CaaS Platform v3
Best practices in Deploying SUSE CaaS Platform v3
Juan Herrera Utande
Managing Oracle Enterprise Manager Cloud Control 12c with Oracle Clusterware
Managing Oracle Enterprise Manager Cloud Control 12c with Oracle Clusterware
Leighton Nelson
Automating Post Exploitation with PowerShell
Automating Post Exploitation with PowerShell
EnclaveSecurity
Java mission control and java flight recorder
Java mission control and java flight recorder
Wolfgang Weigend
Exadata deployment life cycle
Exadata deployment life cycle
Umair Mansoob
The State of the Dolphin, MySQL Keynote at Percona Live Europe 2019, Amsterda...
The State of the Dolphin, MySQL Keynote at Percona Live Europe 2019, Amsterda...
Geir Høydalsvik
OpenStack with OpenDaylight
OpenStack with OpenDaylight
Vikram G Hosakote
Installation of EM 12c
Installation of EM 12c
Jon Petter Hjulstad
OUGLS 2016: Guided Tour On The MySQL Source Code
OUGLS 2016: Guided Tour On The MySQL Source Code
Georgi Kodinov
Similar to Dan Norris: Exadata security
(20)
Maximizing Oracle RAC Uptime
Maximizing Oracle RAC Uptime
Cloud Platform Symantec Meetup Nov 2014
Cloud Platform Symantec Meetup Nov 2014
2014 OpenSuse Conf: Protect your MySQL Server
2014 OpenSuse Conf: Protect your MySQL Server
EM12C High Availability without SLB and RAC
EM12C High Availability without SLB and RAC
Zero to Manageability in 60 Minutes: Building a Solid Foundation for Oracle E...
Zero to Manageability in 60 Minutes: Building a Solid Foundation for Oracle E...
MySQL Manchester TT - Performance Tuning
MySQL Manchester TT - Performance Tuning
Apache cassandra v4.0
Apache cassandra v4.0
Splunk: Forward me the REST of those shells
Splunk: Forward me the REST of those shells
Security of Oracle EBS - How I can Protect my System (UKOUG APPS 18 edition)
Security of Oracle EBS - How I can Protect my System (UKOUG APPS 18 edition)
Cuc pcd tac_toi
Cuc pcd tac_toi
OUGLS 2016: How profiling works in MySQL
OUGLS 2016: How profiling works in MySQL
Best practices in Deploying SUSE CaaS Platform v3
Best practices in Deploying SUSE CaaS Platform v3
Managing Oracle Enterprise Manager Cloud Control 12c with Oracle Clusterware
Managing Oracle Enterprise Manager Cloud Control 12c with Oracle Clusterware
Automating Post Exploitation with PowerShell
Automating Post Exploitation with PowerShell
Java mission control and java flight recorder
Java mission control and java flight recorder
Exadata deployment life cycle
Exadata deployment life cycle
The State of the Dolphin, MySQL Keynote at Percona Live Europe 2019, Amsterda...
The State of the Dolphin, MySQL Keynote at Percona Live Europe 2019, Amsterda...
OpenStack with OpenDaylight
OpenStack with OpenDaylight
Installation of EM 12c
Installation of EM 12c
OUGLS 2016: Guided Tour On The MySQL Source Code
OUGLS 2016: Guided Tour On The MySQL Source Code
More from Kyle Hailey
Hooks in postgresql by Guillaume Lelarge
Hooks in postgresql by Guillaume Lelarge
Kyle Hailey
Performance insights twitch
Performance insights twitch
Kyle Hailey
History of database monitoring
History of database monitoring
Kyle Hailey
Successfully convince people with data visualization
Successfully convince people with data visualization
Kyle Hailey
Virtual Data : Eliminating the data constraint in Application Development
Virtual Data : Eliminating the data constraint in Application Development
Kyle Hailey
DBTA Data Summit : Eliminating the data constraint in Application Development
DBTA Data Summit : Eliminating the data constraint in Application Development
Kyle Hailey
Accelerate Develoment with VIrtual Data
Accelerate Develoment with VIrtual Data
Kyle Hailey
Delphix and Pure Storage partner
Delphix and Pure Storage partner
Kyle Hailey
Martin Klier : Volkswagen for Oracle Guys
Martin Klier : Volkswagen for Oracle Guys
Kyle Hailey
What is DevOps
What is DevOps
Kyle Hailey
Data as a Service
Data as a Service
Kyle Hailey
BGOUG "Agile Data: revolutionizing database cloning'
BGOUG "Agile Data: revolutionizing database cloning'
Kyle Hailey
Denver devops : enabling DevOps with data virtualization
Denver devops : enabling DevOps with data virtualization
Kyle Hailey
DevOps, Databases and The Phoenix Project UGF4042 from OOW14
DevOps, Databases and The Phoenix Project UGF4042 from OOW14
Kyle Hailey
Kscope 14 Presentation : Virtual Data Platform
Kscope 14 Presentation : Virtual Data Platform
Kyle Hailey
Data Virtualization: revolutionizing database cloning
Data Virtualization: revolutionizing database cloning
Kyle Hailey
Delphix and DBmaestro
Delphix and DBmaestro
Kyle Hailey
Agile Data: revolutionizing data and database cloning
Agile Data: revolutionizing data and database cloning
Kyle Hailey
Big data big_skills_data_visualization
Big data big_skills_data_visualization
Kyle Hailey
Nyoug delphix slideshare
Nyoug delphix slideshare
Kyle Hailey
More from Kyle Hailey
(20)
Hooks in postgresql by Guillaume Lelarge
Hooks in postgresql by Guillaume Lelarge
Performance insights twitch
Performance insights twitch
History of database monitoring
History of database monitoring
Successfully convince people with data visualization
Successfully convince people with data visualization
Virtual Data : Eliminating the data constraint in Application Development
Virtual Data : Eliminating the data constraint in Application Development
DBTA Data Summit : Eliminating the data constraint in Application Development
DBTA Data Summit : Eliminating the data constraint in Application Development
Accelerate Develoment with VIrtual Data
Accelerate Develoment with VIrtual Data
Delphix and Pure Storage partner
Delphix and Pure Storage partner
Martin Klier : Volkswagen for Oracle Guys
Martin Klier : Volkswagen for Oracle Guys
What is DevOps
What is DevOps
Data as a Service
Data as a Service
BGOUG "Agile Data: revolutionizing database cloning'
BGOUG "Agile Data: revolutionizing database cloning'
Denver devops : enabling DevOps with data virtualization
Denver devops : enabling DevOps with data virtualization
DevOps, Databases and The Phoenix Project UGF4042 from OOW14
DevOps, Databases and The Phoenix Project UGF4042 from OOW14
Kscope 14 Presentation : Virtual Data Platform
Kscope 14 Presentation : Virtual Data Platform
Data Virtualization: revolutionizing database cloning
Data Virtualization: revolutionizing database cloning
Delphix and DBmaestro
Delphix and DBmaestro
Agile Data: revolutionizing data and database cloning
Agile Data: revolutionizing data and database cloning
Big data big_skills_data_visualization
Big data big_skills_data_visualization
Nyoug delphix slideshare
Nyoug delphix slideshare
Recently uploaded
Call Girls In Saket Delhi 💯Call Us 🔝8264348440🔝
Call Girls In Saket Delhi 💯Call Us 🔝8264348440🔝
soniya singh
Low Rate Call Girls Kolkata Avani 🤌 8250192130 🚀 Vip Call Girls Kolkata
Low Rate Call Girls Kolkata Avani 🤌 8250192130 🚀 Vip Call Girls Kolkata
anamikaraghav4
Delhi Call Girls Rohini 9711199171 ☎✔👌✔ Whatsapp Hard And Sexy Vip Call
Delhi Call Girls Rohini 9711199171 ☎✔👌✔ Whatsapp Hard And Sexy Vip Call
shivangimorya083
₹5.5k {Cash Payment}New Friends Colony Call Girls In [Delhi NIHARIKA] 🔝|97111...
₹5.5k {Cash Payment}New Friends Colony Call Girls In [Delhi NIHARIKA] 🔝|97111...
Diya Sharma
Rohini Sector 6 Call Girls Delhi 9999965857 @Sabina Saikh No Advance
Rohini Sector 6 Call Girls Delhi 9999965857 @Sabina Saikh No Advance
Call Girls In Delhi Whatsup 9873940964 Enjoy Unlimited Pleasure
Dwarka Sector 26 Call Girls | Delhi | 9999965857 🫦 Vanshika Verma More Our Se...
Dwarka Sector 26 Call Girls | Delhi | 9999965857 🫦 Vanshika Verma More Our Se...
Call Girls In Delhi Whatsup 9873940964 Enjoy Unlimited Pleasure
Call Girls Dubai Prolapsed O525547819 Call Girls In Dubai Princes$
Call Girls Dubai Prolapsed O525547819 Call Girls In Dubai Princes$
kojalkojal131
VIP Kolkata Call Girl Dum Dum 👉 8250192130 Available With Room
VIP Kolkata Call Girl Dum Dum 👉 8250192130 Available With Room
divyansh0kumar0
VIP Kolkata Call Girls Salt Lake 8250192130 Available With Room
VIP Kolkata Call Girls Salt Lake 8250192130 Available With Room
girls4nights
'Future Evolution of the Internet' delivered by Geoff Huston at Everything Op...
'Future Evolution of the Internet' delivered by Geoff Huston at Everything Op...
APNIC
AWS Community DAY Albertini-Ellan Cloud Security (1).pptx
AWS Community DAY Albertini-Ellan Cloud Security (1).pptx
ellan12
VIP 7001035870 Find & Meet Hyderabad Call Girls Dilsukhnagar high-profile Cal...
VIP 7001035870 Find & Meet Hyderabad Call Girls Dilsukhnagar high-profile Cal...
aditipandeya
Rohini Sector 22 Call Girls Delhi 9999965857 @Sabina Saikh No Advance
Rohini Sector 22 Call Girls Delhi 9999965857 @Sabina Saikh No Advance
Call Girls In Delhi Whatsup 9873940964 Enjoy Unlimited Pleasure
FULL ENJOY Call Girls In Mayur Vihar Delhi Contact Us 8377087607
FULL ENJOY Call Girls In Mayur Vihar Delhi Contact Us 8377087607
dollysharma2066
Call Girls Service Chandigarh Lucky ❤️ 7710465962 Independent Call Girls In C...
Call Girls Service Chandigarh Lucky ❤️ 7710465962 Independent Call Girls In C...
Sheetaleventcompany
Call Girls In Mumbai Central Mumbai ❤️ 9920874524 👈 Cash on Delivery
Call Girls In Mumbai Central Mumbai ❤️ 9920874524 👈 Cash on Delivery
babeytanya
Low Rate Young Call Girls in Sector 63 Mamura Noida ✔️☆9289244007✔️☆ Female E...
Low Rate Young Call Girls in Sector 63 Mamura Noida ✔️☆9289244007✔️☆ Female E...
SofiyaSharma5
Model Call Girl in Jamuna Vihar Delhi reach out to us at 🔝9953056974🔝
Model Call Girl in Jamuna Vihar Delhi reach out to us at 🔝9953056974🔝
9953056974 Low Rate Call Girls In Saket, Delhi NCR
Packaging the Monolith - PHP Tek 2024 (Breaking it down one bite at a time)
Packaging the Monolith - PHP Tek 2024 (Breaking it down one bite at a time)
Dana Luther
Call Girls in Uttam Nagar Delhi 💯Call Us 🔝8264348440🔝
Call Girls in Uttam Nagar Delhi 💯Call Us 🔝8264348440🔝
soniya singh
Recently uploaded
(20)
Call Girls In Saket Delhi 💯Call Us 🔝8264348440🔝
Call Girls In Saket Delhi 💯Call Us 🔝8264348440🔝
Low Rate Call Girls Kolkata Avani 🤌 8250192130 🚀 Vip Call Girls Kolkata
Low Rate Call Girls Kolkata Avani 🤌 8250192130 🚀 Vip Call Girls Kolkata
Delhi Call Girls Rohini 9711199171 ☎✔👌✔ Whatsapp Hard And Sexy Vip Call
Delhi Call Girls Rohini 9711199171 ☎✔👌✔ Whatsapp Hard And Sexy Vip Call
₹5.5k {Cash Payment}New Friends Colony Call Girls In [Delhi NIHARIKA] 🔝|97111...
₹5.5k {Cash Payment}New Friends Colony Call Girls In [Delhi NIHARIKA] 🔝|97111...
Rohini Sector 6 Call Girls Delhi 9999965857 @Sabina Saikh No Advance
Rohini Sector 6 Call Girls Delhi 9999965857 @Sabina Saikh No Advance
Dwarka Sector 26 Call Girls | Delhi | 9999965857 🫦 Vanshika Verma More Our Se...
Dwarka Sector 26 Call Girls | Delhi | 9999965857 🫦 Vanshika Verma More Our Se...
Call Girls Dubai Prolapsed O525547819 Call Girls In Dubai Princes$
Call Girls Dubai Prolapsed O525547819 Call Girls In Dubai Princes$
VIP Kolkata Call Girl Dum Dum 👉 8250192130 Available With Room
VIP Kolkata Call Girl Dum Dum 👉 8250192130 Available With Room
VIP Kolkata Call Girls Salt Lake 8250192130 Available With Room
VIP Kolkata Call Girls Salt Lake 8250192130 Available With Room
'Future Evolution of the Internet' delivered by Geoff Huston at Everything Op...
'Future Evolution of the Internet' delivered by Geoff Huston at Everything Op...
AWS Community DAY Albertini-Ellan Cloud Security (1).pptx
AWS Community DAY Albertini-Ellan Cloud Security (1).pptx
VIP 7001035870 Find & Meet Hyderabad Call Girls Dilsukhnagar high-profile Cal...
VIP 7001035870 Find & Meet Hyderabad Call Girls Dilsukhnagar high-profile Cal...
Rohini Sector 22 Call Girls Delhi 9999965857 @Sabina Saikh No Advance
Rohini Sector 22 Call Girls Delhi 9999965857 @Sabina Saikh No Advance
FULL ENJOY Call Girls In Mayur Vihar Delhi Contact Us 8377087607
FULL ENJOY Call Girls In Mayur Vihar Delhi Contact Us 8377087607
Call Girls Service Chandigarh Lucky ❤️ 7710465962 Independent Call Girls In C...
Call Girls Service Chandigarh Lucky ❤️ 7710465962 Independent Call Girls In C...
Call Girls In Mumbai Central Mumbai ❤️ 9920874524 👈 Cash on Delivery
Call Girls In Mumbai Central Mumbai ❤️ 9920874524 👈 Cash on Delivery
Low Rate Young Call Girls in Sector 63 Mamura Noida ✔️☆9289244007✔️☆ Female E...
Low Rate Young Call Girls in Sector 63 Mamura Noida ✔️☆9289244007✔️☆ Female E...
Model Call Girl in Jamuna Vihar Delhi reach out to us at 🔝9953056974🔝
Model Call Girl in Jamuna Vihar Delhi reach out to us at 🔝9953056974🔝
Packaging the Monolith - PHP Tek 2024 (Breaking it down one bite at a time)
Packaging the Monolith - PHP Tek 2024 (Breaking it down one bite at a time)
Call Girls in Uttam Nagar Delhi 💯Call Us 🔝8264348440🔝
Call Girls in Uttam Nagar Delhi 💯Call Us 🔝8264348440🔝
Dan Norris: Exadata security
1.
Copyright © 2015,
Oracle and/or its affiliates. All rights reserved. | Exadata Database Machine Security Dan Norris MAA Team, Oracle Development October 26, 2015
2.
Copyright © 2015,
Oracle and/or its affiliates. All rights reserved. | Program Agenda PreparaKon for installaKon InstallaKon, deployment Post-‐deployment configuraKon Database creaKon and configuraKon OperaKonal security consideraKons 1 2 3 4 5 2
3.
Copyright © 2015,
Oracle and/or its affiliates. All rights reserved. | Security Terminology • APack surface – the code within a computer system that can be run by unauthorized users • Port – network term referring to a virtual endpoint • Service – operaKng system term referring to a background process or daemon • CPU – CriKcal Patch Update, quarterly released security patches for Oracle products Ge)ng us on the same page 3
4.
Copyright © 2015,
Oracle and/or its affiliates. All rights reserved. | PreparaKon for InstallaKon • Get educated • Collect security-‐related requirements from all stakeholders • Determine whether role-‐separated installaKon is required • Plan network layout • Subscribe to security alerts -‐ hPp://is.gd/orasec • Review MOS note 1068804.1: Guidelines for enhancing the security for an Oracle Database Machine deployment Security starts early 4
5.
Copyright © 2015,
Oracle and/or its affiliates. All rights reserved. | Plan Network Layout • Client Access is entry point for most accesses • Management should be restricted • InfiniBand is private to machine, physical security protects it Perimeter security for networks 5
6.
Copyright © 2015,
Oracle and/or its affiliates. All rights reserved. | InstallaKon and Deployment • Exadata includes many security features by default • Implement the recommended security step during deployment – AKA “Resecure Machine” step • Start secure, only open what is necessary – “Doing security” later almost never happens (or works) • Configure ASM audits to use syslog (audit_syslog_level) • Configure ASM & DB init.ora: audit_sys_operaKons=true Implement the available features and security plan 6
7.
Copyright © 2015,
Oracle and/or its affiliates. All rights reserved. | Default Security Features • short package install list • only necessary services enabled • hPps management interface • sshd secure default sehngs • password aging • maximum failed login aPempts Implement the available features and security plan 7 • auditd monitoring enabled • cellwall: iptables firewall • CPUs included in patch bundles, releases synchronized • system hardening • boot loader password protecKon
8.
Copyright © 2015,
Oracle and/or its affiliates. All rights reserved. | Resecure Machine Step • In this step, several security changes are made: – password complexity requirements are added (dis,dis,16,12,8) – passwords are expired (forcing reset on next login) – password aging implemented – permissions Kghtened Implement the available features and security plan 8
9.
Copyright © 2015,
Oracle and/or its affiliates. All rights reserved. | Resecure Machine Step $ ./install.sh –cf maa-phys.xml -l 1. Validate Configuration File 2. Setup Required Files <snip many steps> 17. Install Exachk 18. Create Installation Summary 19. Resecure Machine 9
10.
Copyright © 2015,
Oracle and/or its affiliates. All rights reserved. | Resecure Machine Step $ ./install.sh –cf maa-vm.xml -l 1. Validate Configuration File 2. Create Virtual Machine 3. Create Users <snip many steps> 17. Create Installation Summary 18. Resecure Machine 10
11.
Copyright © 2015,
Oracle and/or its affiliates. All rights reserved. | Post-‐Deployment ConfiguraKon • Change all passwords for all default accounts (MOS 1291766.1) • Perform validaKon for local policies or rules – See MOS 1405320.1 for commonly idenKfied audit findings • Exadata Security – especially for consolidaKon environments Address site-‐specific requirements 11
12.
Copyright © 2015,
Oracle and/or its affiliates. All rights reserved. | Post-‐Deployment ConfiguraKon • *New* in 12.1.2.2.0 • Cells can have remote access disabled – no SSH access to OS • Must enable temporarily for maintenance (upgrades) • New cell aPributes: remoteAccessPerm, remoteAccessTemp • Can temporarily enable access, automaKc lock up at a specified Kme • Can sKll access console via ILOM • Use exacli/exadcli from DB nodes for cell commands Cell Lockdown 12
13.
Copyright © 2015,
Oracle and/or its affiliates. All rights reserved. | Post-‐Deployment ConfiguraKon cellcli> create role administrator cellcli> grant privilege all actions on all objects all attributes with all options to role administrator cellcli> create user celladministrator password='*' cellcli> grant role administrator to user celladministrator Cell Lockdown Setup 13
14.
Copyright © 2015,
Oracle and/or its affiliates. All rights reserved. | Post-‐Deployment ConfiguraKon # cellcli -e list cell detail | egrep -i 'cellversion|accesslevel' accessLevelPerm: remoteLoginDisabled cellVersion: OSS_12.1.2.2.0_LINUX.X64_150917 exacli> alter cell accessLevelTemp=((accessLevel="remoteLoginEnabled", - startTime="now", - duration="30m", - reason="Quarterly maintenance")) Cell Lockdown 14
15.
Copyright © 2015,
Oracle and/or its affiliates. All rights reserved. | Post-‐Deployment ConfiguraKon • Cells have syslogconf cell aPributes (for quite a while) • DB nodes have /etc/rsyslog.conf – On 12.1.2.1.0 & later, also have syslogconf dbserver aPribute Centralized syslog 15
16.
Copyright © 2015,
Oracle and/or its affiliates. All rights reserved. | Post-‐Deployment ConfiguraKon On receiving side, for rsyslogd, modify /etc/rsyslogd.conf: # Provides UDP syslog reception $ModLoad imudp $UDPServerRun 514 The HUP rsyslogd: kill -HUP $(cat /var/run/syslogd.pid) Centralized syslog setup 16
17.
Copyright © 2015,
Oracle and/or its affiliates. All rights reserved. | Post-‐Deployment ConfiguraKon cellcli> alter cell syslogconf=('authpriv.* @syslgsrv', 'security.* @seclogserver'); cellcli> alter cell validate syslogconf 'authpriv.error'; dbmcli> alter dbserver syslogconf=('authpriv.* @syslgsrv', 'security.* @seclogserver'); dbmcli> alter dbserver validate syslogconf 'authpriv.error'; Centralized syslog 17
18.
Copyright © 2015,
Oracle and/or its affiliates. All rights reserved. | Exadata Security (ASM, Griddisks) ConsolidaIon: sharing without peeking 18 • Privileges on griddisk level • Restrict griddisks to certain clusters and/or certain database(s) • Especially effecKve to manage mulKple administrators • See whitepapers – Oracle Exadata Database Machine ConsolidaKon: SegregaKng Databases and Roles -‐ hPp://is.gd/exaconsolidaKon – Best PracKces for Database ConsolidaKon On Exadata Database Machine -‐ hPp:// is.gd/orclconswp
19.
Copyright © 2015,
Oracle and/or its affiliates. All rights reserved. | Database CreaKon and ConfiguraKon Implement database-‐specific features and best pracIces 19 • Stay current with Exadata bundle patches (888828.1) – Bundle patches include latest CPU patches • Consider TDE, network encrypKon, Data Vault, Audit Vault • Review whitepaper: “Cost EffecKve Security and Compliance with Oracle Database 11g Release 2” -‐ hPp://is.gd/seccompliance11gr2 • Take the Enterprise Data Security Assessment at hPp://is.gd/ entsecassessment
20.
Copyright © 2015,
Oracle and/or its affiliates. All rights reserved. | Oracle Database Security Defense in Depth Masking & Subsetting DBA Controls & Cyber Security Encryption & Redaction PREVENTIVE Activity Monitoring Database Firewall Auditing and Reporting DETECTIVE ADMINISTRATIVE Privilege & Data Discovery Configuration Management Key & Wallet Management 20
21.
Copyright © 2015,
Oracle and/or its affiliates. All rights reserved. | OperaKonal Security ConsideraKons Remain security-‐minded when patching, upgrading, backing up 21 • Changes permiPed on DB nodes, not cells • Backups can be encrypted • Patching or upgrading may “undo” some changes; verify aper • DB node updates use yum commands with excludes (see doc for excludes)
22.
Copyright © 2015,
Oracle and/or its affiliates. All rights reserved. | OperaKonal Security ConsideraKons Remain security-‐minded when patching, upgrading, backing up 22 • Periodic reviews to ensure sehngs remain and vulnerabiliKes don’t • Secure erase for storage cells is available • Disk drive retenKon is available • Oracle Enterprise Manager Governance, Risk & Compliance Manager conKnuously reviews the system
23.
Copyright © 2015,
Oracle and/or its affiliates. All rights reserved. | OperaKonal Security ConsideraKons Component Access Required Database – Patch set Database server root, sopware home owner, passwordless SSH to all sopware home owners (on other nodes) Database – Patch set Database server root, sopware home owner Grid Infrastructure Same as Database Exadata Database Server (OS) Database server root Exadata Storage Server Database server root, Passwordless SSH from database server root to storage server root (temporarily disable lockdown) InfiniBand Switch Database server root, InfiniBand switch root 23 Patching consideraIons
24.
Copyright © 2015,
Oracle and/or its affiliates. All rights reserved. | Late Breaking Security Updates MOS Note or URL DescripIon Coming soon UpdaKng JDK on Exadata Database Machine database nodes 2060027.1 October 2015 ILOM security updates – fixes included in Exadata 12.1.2.2.0 images 24
25.
Copyright © 2015,
Oracle and/or its affiliates. All rights reserved. | Summary PreparaKon for installaKon InstallaKon, deployment Post-‐deployment configuraKon Database creaKon and configuraKon OperaKonal security consideraKons 1 2 3 4 5 25
26.
Copyright © 2015,
Oracle and/or its affiliates. All rights reserved. | References Note or URL DescripIon hPp://is.gd/orasec Oracle Security Alerts subscripKon 1068804.1 Guidelines for enhancing the security for an Oracle Database Machine deployment 1291766.1 How to change OS user password for Cell Node, Database Node , ILOM, KVM , Infiniband Switch , GigaBit Ethernet Switch and PDU on Exadata 888828.1 Database Machine and Exadata Storage Server 11g Release 2 (11.2) Supported Versions 1405320.1 Responses to common Exadata security scan findings hPp://is.gd/exaconsolidaKon Oracle Exadata Database Machine ConsolidaKon: SegregaKng Databases and Roles hPp://is.gd/entsecassessment Enterprise Data Security Assessment 26
27.
Copyright © 2015,
Oracle and/or its affiliates. All rights reserved. | References MOS Note or URL DescripIon 1938719.1 Exadata informaKon on Bash shellshock vulnerability 1935817.1 Exadata informaKon on SSLv3 POODLE vulnerability hPp://is.gd/orclpoodle Generic info about POODLE for all Oracle products hPp://is.gd/orclshellshock Generic info about Bash Shellshock for all Oracle products 2069987.1 HOWTO: Update JDK on Exadata Database Nodes 27
28.
Copyright © 2015,
Oracle and/or its affiliates. All rights reserved. | Safe Harbor Statement The preceding is intended to outline our general product direcKon. It is intended for informaKon purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or funcKonality, and should not be relied upon in making purchasing decisions. The development, release, and Kming of any features or funcKonality described for Oracle’s products remains at the sole discreKon of Oracle. 28
29.
Copyright © 2015,
Oracle and/or its affiliates. All rights reserved. | 29
Download now