Eddie Awad’s Blog - Latest Comments in Oracle Rootkit

Re: Oracle Rootkit

Tom_Fox — Tue, 24 Jan 2006 15:21:45 -0000

I was a security consultant prior to being a DBA.

I found that many folks tend to think of security as blocking outsiders. Yet, too many times, an internal attack causes more problems, due to lack of auditing for internal users. Further, if a company deploys a VPN with another company, you can possibly have users at another company taking stabs at your data without your knowledge.

Oh boy, what a wonderful world we live in.

--Tom

Re: Oracle Rootkit

Eddie Awad — Tue, 24 Jan 2006 15:03:19 -0000

The DBSA already exists in many larger organizations

I guess in smaller (even medium) size organizations, database security is mainly the responsibility of a DBA, and, to alesser extent, database developers. -- Thanks Lewis.

Re: Oracle Rootkit

Lewis Cunningham — Tue, 24 Jan 2006 07:46:06 -0000

Hi Eddie,

The DBSA already exists in many larger organizations. With all of the compliance regulations and issues in recent years, it's important to have someone responsible for database security that understands the laws and regualtions around data at rest. Understanding rootkits and keeping up with the latest from both Oracle and hackers is an important part of the job.

Thanks,

LewisC
http://blogs.ittoolbox.com/...