Admin 1. 10장 Implementing Oracle Database Security

표준 Auditing

 

S SYS> alter system set audit_trail=db scope=spfile;

System altered.

S SYS> shutdown immediate;

 

 

S SYS> audit all on scott.emp;

Audit succeeded.

 

 

S SCOTT> update emp set sal=sal*2 where ename='SCOTT';

1 row updated.

S SCOTT> commit;

S SCOTT> conn / as sysdba
Connected.
S SYS> desc aud$

 

 

select versions_starttime,versions_endtime,ename,sal
from scott.emp versions between timestamp
minvalue and maxvalue
where not(versions_endtime is null and versions_starttime is null)
order by versions_endtime
/

 

---

Value_base Auditing                                by trigger

 

conn system/oracle
create table system.AUDIT_EMPLOYEES(osuser varchar2(32),date1 date,
      ip varchar2(32),audit_trail varchar2(37));

create or replace trigger system.hrsalary_audit
       after update of salary
       on hr.employees
       referencing new as n old as o
       for each row
   begin
       if :o.salary != :n.salary then
               insert into system.audit_employees
                   values(sys_context('userenv','os_user'),sysdate,
                   sys_context('userenv','ip_address'),
                   :n.employee_id|| ' salary changed from ' ||
                      :o.salary || ' to ' || :n.salary);
      end if;
end;
/

 

TDE->VPD->FGA

TDE(Transparent Database Encryption) 데이터 파일 암호화

http://www.oracle.com/technology/obe/10gr2_db_single/security/tde/tde_otn.htm