1. Oracle Application Express Rapid Application Development Tool

2. Proliferation of Departmental Databases Inefficient, Ad-hoc Deployments Departments continuously create decentralized databases, such as MS Access, to solve tactical issues Need solutions NOW that they control Often contain business critical data Security, sharing, data accuracy, and high availability are problematic Costs are driven up as hundreds of these systems are created Departments work against IT, not with IT © 2009 Oracle Corporation – Proprietary

3. The APEX Consolidated Model Decentralized Development, Centralized Management Consolidate departmental data and the application development service into Oracle Database 11g with Application Express (APEX) Oracle Database 11g ensures that APEX applications are secure, reliable and scalable Departments maintain full control over application development IT provides professional data management End user experience is dramatically improved © 2009 Oracle Corporation – Proprietary

4. Oracle Application Express (APEX) D atabase-centric Web application development tool Unique Rapid Application Development (RAD) tool for the Oracle Database Browser based for Development, Deployment & Runtime Declaratively build professional Web 2.0 applications that are fast and secure Leverages full Oracle database capabilities and existing SQL & PL/SQL skills Fully supported, “no-cost” standard component with all editions of the Oracle Database Easy - Rapid - Empowering © 2009 Oracle Corporation – Proprietary

5. Design Develop Deploy APEX Rapid Application Development

6. Oracle Application Express Use Cases Data-driven Applications Develop opportunistic and departmental productivity applications Online Reporting Build SQL-based reporting applications on existing database schemas Access Replacement Consolidate outgrown Access applications to the Oracle database with an APEX Web front end Spreadsheet Web-ification Convert spreadsheets to Web applications where they can be concurrently viewed and edited Oracle Forms Modernization Leverage SQL & PL/SQL declarative programming skills to move Forms applications to HTML / Web 2.0 © 2009 Oracle Corporation – Proprietary

7. © 2010 Oracle Corporation Developer community - 80k+ downloads / year apex.oracle.com – 4m page views / week Active Discussion Forum – 4.6 m views, #3 on OTN 100 Consulting companies, 60 BLOGs, 10 Hosting Partners User Groups: 30 @OOW-09, 50 @ODTUG, APEXposed User interface for Oracle Store and Oracle Audit Vault Oracle Application Express Momentum

8. © 2010 Oracle Corporation Oracle Application Express Books

9. © 2009 Oracle Corporation Community Focus Strong & Supportive Community Popular OTN Discussion Forum Consulting Companies Blogs, SIGs Commercial Applications Internet Applications

10. © 2009 Oracle Corporation 2006 Application Express 2.2 Packaged Applications History 2006 Application Express 2.1 Oracle XE 2005 HTML DB 2.0 SQL Workshop 2004 HTML DB 1.6 Themes 2004 HTML DB 1.5 First Release 2007 Application Express 3.0 Flash Charts, PDF Printing, Access Application Migration 2008 Application Express 3.1 Interactive Reports, BLOB 2009 Application Express 3.2 Forms Conversion 2010Application Express 4.0 Websheets, Dynamic Actions, Plug-Ins, RESTful Web

11. © 2009 Oracle Corporation Targets the Rapid Application Development Community

12. © 2009 Oracle Corporation Out of the Box Development Features Reports Forms Charts Calendar Templates Navigation Validations Processes Computations Branches Web Services Email Services Translation Services Conditional Processing Authentication Authorization Session State Management Logging & Monitoring

13. Oracle Application Express Architecture

14. © 2009 Oracle Corporation Architectural Overview Integrated within the database 9iR2, 10g, 11g, XE Meta data driven Uses APEX Listener, Embedded Gateway or ModPLSQL

15. © 2009 Oracle Corporation Multi-Tenant SaaS Single Oracle Database for multiple applications Provides virtual private databases Self-service or IT managed provisioning

16. Development / Deployment Options Locally Install on Stand-alone machine Multi-tenant Private Cloud Workspaces for each department Self-service provisioning model Public Cloud Hosting partners Amazon EC2 © 2010 Oracle Corporation Develop & deploy where it is most convenient and cost effective

17. Why APEX makes sense for the Cloud Very few moving parts – Simple to manage Browser based development / deployment / runtime No client-side dependencies Multi-Tenant SaaS provides multiple “workspaces” Applications easy to migrate to other deployments Database Backups also backup application source Oracle AMI includes APEX (may require upgrade) Webservice Support © 2009 Oracle Corporation

18. Building Integrated Applications

19. © 2010 Oracle Corporation Oracle APEX Listener Java based Alternative to mod_plsql Certified against WebLogic, Oracle Glassfish, and OC4J Extensible File system caching * FOP transformations to PDF * Improved file upload * Workload Capture * * Requires APEX 4.0

20. Oracle Application Express Consolidation / Migrations / Conversions

21. © 2009 Oracle Corporation MS Access to APEX Migration Drivers Consolidation of departmental applications to centrally managed IT Some applications have grown and become mission critical Web unfriendly Platform dependent Poor security Limited scalability / excessive network traffic Challenges Effort / business knowledge required to migrate Poor data model design No documentation

22. © 2009 Oracle Corporation MS Access Migration - SQL Developer and Oracle APEX Export MS Access metadata Migrate the Microsoft Access database to Oracle Create an Oracle Application Express Workspace Create a migration project Analyze the Microsoft Access application Generate the Oracle Application Express Application Customize your Application Express application

23. © 2009 Oracle Corporation Oracle Forms to APEX Conversion Drivers Modernization of software / hardware Incorporate Web 2.0 capabilities Deliver greater user interactivity Utilize existing Database objects Can re-use existing IT developer skill-set Difficulty finding new Oracle Forms developers Challenges Availability of IT application matter experts Conversion is non-trivial, requiring significant effort and resources APEX application will not look nor feel like Forms application

24. © 2009 Oracle Corporation Oracle APEX Forms Conversion Overview

25. © 2009 Oracle Corporation Load Oracle Forms Source Run Forms2XML Utility Create APEX Project Upload Source Files Forms2XML Utility: Available with Forms 9i & 10g May convert Forms 4.x & 6i If conversion fails will need to manually upgrade first

26. © 2009 Oracle Corporation Step 1: Identify Components to be Generated Browse Components Blocks Select / Deselect Enhance SQL Query Items Select / Deselect Review Prompts Annotate – Triggers, Program Units, Alerts, etc. Is it Applicable? Document post-generation requirements

27. © 2009 Oracle Corporation Step 2: Automatically Generate Components Blocks Form Interactive Report & Form Master / Detail Tabular Form Items Date Pickers HTML Editors Checkboxes Radio Groups Select Lists Pop-up List of Values List of Values Reports Interactive Reports

28. Application Logic User Interface Annotate Update Completion Increases % complete © 2009 Oracle Corporation Step 3: Manual Post-Generation Tasks Make same width as box below

29. © 2009 Oracle Corporation Track Conversion Progress

30. Oracle Application Express Security

31. © 2009 Oracle Corporation Authentication Out-of-the-Box Pre-Configured Schemes LDAP Directory credentials Oracle Application Server Single-Sign On Open door credentials Application Express accounts Database Account credentials No Authentication Custom Authentication Customizable session management logic Use or modify (session verification function) built-in page sentry Develop custom sentry (examples provided) Credentials verification custom PL/SQL Accepts user name and password; Returns Boolean Only executed once per session

32. © 2009 Oracle Corporation Managing User Access Authorization Pass / Fail checks – cached to improve performance Can associate to any component (e.g. Application, page, button, validation, item, etc.) Various types (e.g. Exists, SQL Query, PL/SQL Function, etc.) Session State Protection Prevent URL Tampering Utilizes MD5 checksum Agnostically use Database Security Features Fine Grained Access Control (aka VPD); Transparent Data Encryption; Database Vault; Advanced Security Option; etc. No APEX development effort required

33. © 2009 Oracle Corporation Administrator Best Practices Considerations with Embedded PL/SQL Gateway Uses XMLDB HTTP Protocol Listener – Part of the Database Not recommended for internet facing applications Configuring Oracle HTTP Server with mod_plsql Configured using Database Access Descriptors (DADs) Use PlsqlRequestValidationFunction to allow specified procedures Utilizing Secure Sockets Layer (SSL) Implemented using the HTTPS protocol – encrypts sent / received packets Prevents data from being sent over unprotected communication channel APEX Runtime-Only Environment Scripts provided to completely remove / re-install Application Builder Removes Web interface for administration and application development Setting Password Complexity Rules Can set multiple complexity rules / re-use rules across instance Using Session Timeout Set maximum session length and idle time for APEX developer log-ins

34. © 2009 Oracle Corporation Developer Best Practices Understand Items of type Password Don’t emit entered text to screen Should not save-state or should use Item encryption if saving to the DB Reports provided to identify at-risk Password items Using Zero as Session ID Critical for PUBLIC applications to ensure no cross-user contamination Session Id not included in application URL Cross-Site Scripting Protection Protect HTML Regions and other static areas Use &ITEM. notation to reference session state variables Select best Item types based on protection required Protect Dynamic Output Explicitly use escape code when emitting session state {e.g. htp.p(htf.escape_sc(v('SOME_ITEM'))); } Protect Report Regions References in headings and messages escaped based on Item type

35. © 2009 Oracle Corporation Developer Best Practices Session State Protection Clear session state of unneeded values using Clear Cache built-ins Enable Session State Protection to prevent URL tampering Set appropriate protection for Pages, Items and Application Items using built-ins Utilize Application Session Time-Outs Build public page for users to land on when session expired Set Maximum Session Length and Maximum Session Idle times Save State before Branching Use Branch checkbox to save session state values prior to branching Session state values will not be displayed in the Branch URL Saving sensitive Item values (e.g. SSN) Use Item checkbox to store value encrypted in session state Stores values encrypted in APEX session state table For storing sensitive data in the database should encrypt the table columns Encrypting table columns completely independent of APEX

36. Oracle Application Express Integrated with SQL Developer

37. © 2009 Oracle Corporation SQL Developer and Application Express Browse your Application Express Applications Manage Applications (Export / Import / Deploy / Drop) Modify Applications Monitor / Tune your Queries Remote Debugging Included APEX Reports Custom Exception Reports Requires SQL Developer 1.2.1 + and Application Express 3.0.1 +

38. Oracle SQL Developer Database Development IDE Popular Most downloaded Oracle tool 1.5m users #1 Oracle database development IDE Distribution (No Cost) With Database – All Editions OTN download Benefits Productivity Ease of use Introduced March 2006 © 2009 Oracle Corporation

39. Oracle SQL Developer Data Modelling New SQL Developer graphical data modelling supports Designing logical Entity Relation Diagrams (ERD) Building relational schema designs Add physical database details Generating and executing DDL scripts Reverse engineering of existing data structures Import of data models from Erwin and Designer Provides modelling for multiple databases Oracle Database DB2 (Mainframe & UDB) SQL Server Supports Multi-dimensional modelling (incl. cubes and spatial) Multi-level logical and physical design environment Model validation rules

40. Oracle Improving Developer Productivity Improving developer productivity over each phase of the database application development life cycle Improving developer productivity with new tools: SQL Developer, and Application Express Introducing database data modeling * SQL Developer Data Modeling and SQL Developer Unit Testing not yet released © 2009 Oracle Corporation

41. Oracle Application Express Customer Surveys / Profiles

42. © 2009 Oracle Corporation Customer Surveys

43. Oracle APEX Customer Profiles Modernization of Legacy Applications Paetec Software Corp 20 year old application – Converted from Omni Software Required Web capabilities Engineers skilled in PL/SQL and no Web experience Large UK based ISV Currently converting 5,000 Oracle Forms Required Web 2.0 capabilities to be competitive Very extensive re-use of existing Database objects Integrated Solutions InterVarsity Christian Fellowship/USA Integrated with eBusiness Suite Roman Incorporated Integrated with ERP and used on Handhelds Harvard Pilgrim Health Care Online application for individuals integrated with existing system for employees © 2009 Oracle Corporation

44. Oracle APEX Customer Profiles Reporting Applications Oracle Audit Vault 10.2.3 Replaced 100’s of individual reports with 30 Interactive Reports Iron Mountain Monitor over 60 databases from one application Evaluate disc usage and predict future requirements Targeted Solutions PGA Golf Tournament purse management and payment system BMW / Oracle Racing Provide analytics on data obtained from yacht sensors AskTom Tom Kyte’s highly popular discussion forum CERN Training & safety registration applications © 2009 Oracle Corporation

45. Oracle APEX Customer Profiles Departmental Applications Deutsche Telecom Physical stores sales tracking application WaMu Standard corporate development tool US Army Property planning and inventory management system Consolidation Projects Telstra 18,000 Access Applications causing major network load Banned Access and consolidated into APEX Tennessee Department of Environment & Conservation Power users trained in APEX (no IT required) Consolidating spreadsheets and Access into Oracle Lansing Community College Microsoft Access and Microsoft Excel consolidation © 2009 Oracle Corporation

46. Oracle APEX Customer Profiles Commercial Applications Paetec – Pinnacle Communications Management Suite Integrated Service Lifecycle Management (SLM) application Available licensed, hosted, or managed Insum Association Management - Software as a Service (SaaS) Neoface CRM for the SMB market Internet Applications ProMED-Mail Rapid global dissemination of information on outbreaks of infectious diseases and acute exposures to toxins that affect human health Utah Department of Transport (UDOT) Content management application and the public facing application endlichferien GbR High traffic portal to connect vacationers with cottage owners, travel agencies, etc. © 2009 Oracle Corporation

47. Oracle Application Express Summary

48. © 2009 Oracle Corporation Oracle APEX Roadmap APEX 3.1 Introduced Interactive Reports Basis for Audit Vault Reporting APEX 3.2 Forms Conversion Enhanced Security features APEX 4.0 Websheets Dynamic Actions Plug-Ins RESTful Web Services Improved Themes Download from OTN

49. © 2009 Oracle Corporation Oracle Application Express Oracle 11g differentiator (Application Development framework) Large and Rapidly growing APEX community Dominating Oracle RAD development (Fast and easy) Capitalizes on SQL and PL/SQL knowledge and popularity Driving legacy conversion / consolidation Web 2.0 capabilities – Interactive Reports, Flash, Dynamic Actions, Plug-Ins Empowering technology – Scalable, Integrated and Secure Integration – EBS, CRM On-Demand, etc.

50. © 2009 Oracle Corporation Only good for Excel / Access replacement Successfully used to meet a large variety of use cases from small to very large, from simple to very complex Simple architecture won’t scale Single tier architecture results in fewer network traversals and CPU cycles per page request Takes full advantage of Oracle Database capabilities and features as built 100% inside database Proven by countless customer success stories and sites like ARIA, AskTom, ThinkQuest APEX is not here to stay APEX 4.0 represents the 9th major release since 2004 Integrated into Oracle 11gR1 Seed Database (Part of the core database as a standard feature) Oracle increasingly relies on APEX for internal applications to improve business processes It’s free so it can’t be … Oracle provides APEX, SQL Developer, etc. at no-cost to encourage development in Oracle Technologies and increase utilization of the Oracle Database Dedicated APEX Oracle Support team available as part of standard Oracle Database license Oracle will charge for APEX in the future Oracle has no plans to charge for APEX No precedent exists for Oracle charging for a database feature that is currently “no-cost” Oracle Application Express FUD

51. © 2009 Oracle Corporation Oracle Technology Network (OTN) Download latest Release Getting Started Documentation & Tutorials Hosted Environment Oracle By Examples Community & Partners

52. © 2009 Oracle Corporation Next Steps Information: http://otn.oracle.com/apex Hosted Development: http://apex.oracle.com

53. © 2009 Oracle Corporation