Protect Against Common Database Attacks with SQL Firewall
summary
Oracle embeds the Oracle SQL Firewall in the Database 23ai kernel and enforces an allowlist of approved SQL statements and the ability to enforce connection paths per user. Management uses Oracle Data Safe (fleet UI, REST/CLI) or the DBMS_SQL_FIREWALL PL/SQL package. It collects live SQL (optionally including PL/SQL), offers monitor or block mode, logs violations to a violation log or audit trail, and ships with Live Labs and demos to validate behavior.
AI-written summary · about
chapters (12)
- 0:00Introduction to SQL firewall
- 0:38SQL injection risks
- 3:20SQL firewall architecture
- 4:16Use cases and configuration
- 7:06Managing via Data Safe
- 9:11Configuring the firewall
- 11:44Collection and policy steps
- 13:43Enforcement and monitoring
- 15:44Reviewing violation reports
- 16:40Overview of Data Safe
- 21:44Summary and resources
- 24:31Closing remarks
related talks
15mBest Practices for Securing Oracle Database
35mBuilding an SQL Firewall: Insights from Developers
29mStreamlining security for all your Oracle databases with Oracle Data Safe
28mStreamlining security for your databases with Data Safe
24mDefending the Oracle Database: responding to the threat of ransomware
22mComplete database security in 4 simple steps
33mAutonomous Database: taking Oracle's most secure database to the next level
34mWhat's new with in-database blockchain and crypto-security?