The Oracle^® Hacker's Handbook: Hacking and Defending Oracle

by David Litchfield

• ISBN13: 9780470133705
• ISBN10: 0470133708
• Format: eBook
• Copyright: 2007-04-01
• Publisher: Wiley

Summary

Knowledge is power, and the power can be yours While Oracle continues to improve the security features of its product, it still has a long way to go. David Litchfield has devoted years to relentlessly searching out the flaws in this ubiquitous database system and creating defenses against them. Now he offers you his complete arsenal to assess and defend your own Oracle systems. Like The Shellcoder's Handbook and The Database Hacker's Handbook, this in-depth guide explores every technique and tool used by black hat hackers to invade and compromise Oracle. It shows you how to find the weak spots and defend them. Without that knowledge, you have little chance of keeping your databases truly secure. Discover how to deal with the security flaws revealed in the Oracle RDBMS Explore some never-before-published forays into Oracle security holes and learn to defend them from attack Learn why independent security assessments are not necessarily a guarantee of safety See how Oracle 10g Release 2 has improved its security features and where the flaws remain Take advantage of extensive and valuable code downloads on the companion Web site at www.wiley.com/go/ohh Visit our Web site at www.wiley.com/go/ohh

Table of Contents

About the Author

Acknowledgments

Introduction

Code Samples from the Book

Oracle and Security

The "Unbreakable" Marketing Campaign

Independent Security Assessments

The Future

Overview of the Oracle RDBMS

Architecture

Processes

The File System

The Network

Database Objects

Users and Roles

Privileges

Oracle Patching

Wrapping Up

The Oracle Network Architecture

The TNS Protocol

The TNS Header

Inside the Packet

Getting the Oracle Version

The Listene

Table of Contents provided by Publisher. All Rights Reserved.