Increasing security by disabling DML statements to a dba user in Oracle database Hakik PACI Polytechnic University of Tirana

Agenda Motivation Security in Oracle database Disabling DML statements to any user Self Protection Conclusions

Motivation Digital Data Who has access to the data? Legal permissions

Security in Oracle database Users Roles DBA user Monitoring and killing Sessions Database Audit

Disabling DML statements to any user Analyzing every SQL statements Preventing any unauthorized user to execute DML statements

Self Protection Why? Analyzing DDL statements Preventing any unauthorized DDL statements which effect our scripts

The Package (1) Object nameTypeDescription set_securityProcedureThis procedure enables and disables protection Procedure password is required set_passwordProcedureThis procedure change password, Old and new password are required reset_passwordProcedureThis procedure sends an to security officer with new password add_objectProcedureThis procedure defines a new object to be protected, Object owner, object type and object name are required. remove_objectProcedureThis procedure removes an object from protection list, Object owner, object type and object name are required. grant_permissionProcedureThis procedure grants permission on a protected object to a database user. Object owner, object type and object name, and user name are required. Start date, end date, start hour and end hour are optional.

The Package (2) Object nameTypeDescription revoke_permissionProcedureThis procedure revokes permission a database user. Object owner, object type and object name, and user name are required. exp_killed_sessionProcedureThis procedure exports all killed sessions. Start date and end date are optional. security_objectTableThis table contains information about objects which will be protected user_permissionTableThis table contains information about users which have permission over protected objects p_config TableThis table contains information about configuration, password, etc. data are encrypted killed_sessions TableThis table contains information about killed sessions ddl_log TableThis table contains information about every DDL statement executed by any database user

Conclusions Disabling DML statements from unauthorized users, even he has a DBA role Monitoring all sessions which causes the database performance to decrease slightly The package must be installed to a user with sysdba role.

Thank you!