Sie befinden sich aktuell in den Blog Blog-Archiven für den folgenden Tag 29 Mai 2007.
- 10.2.0.4 (1)
- 11g (3)
- Allgemein (11)
- BEA (1)
- checkpwd (4)
- CPUApr2008 (3)
- CPUJan2008 (2)
- CPUJul2007 (3)
- CPUOct2007 (1)
- Database Vault (1)
- David Litchfield (4)
- Exploit (4)
- Forensics (3)
- Inguma (2)
- MacOS (1)
- Mary Ann (1)
- Oracle (2)
- Oracle Security (46)
- passwords (3)
- Podcast (1)
- rootkits (1)
- Security (9)
- Security Book (1)
- Sentrigo (1)
- software (2)
- Source Code Analysis (1)
- source code audit (3)
- SQL Injection (4)
- Trainings (1)
- 9 Aug 2008: July 2008 CPU Advisory - Windows Patch update for Oracle 10.1.0.5
- 29 Jul 2008: Exploit for Oracle Bea Weblogic - Apache Connector published
- 8 Mai 2008: Checkpwd 1.23 for MacOS Intel native released
- 16 Apr 2008: Oracle CPU April 2008 - Update
- 15 Apr 2008: Oracle Critical Patch Update April 2008 is out
- 11 Apr 2008: Looking Glass and Oracle 11g
- 11 Apr 2008: Oracle Critical Patch Update Pre-Release Announcement - April 2008
- 4 Mrz 2008: We proudly present: Anna Marie Kornbrust
- 4 Mrz 2008: Corba Exploit for VisiBroker published
- 25 Feb 2008: Oracle Patchset 10.2.0.4 is out
Archive für 29 Mai 2007
Podcast on database forensics
29 Mai 2007 von Alexander Kornbrust.
The following link contains a podcast where David talks about database forensics.
Geschrieben in Podcast, David Litchfield, Oracle Security | Keine Kommentare »
David Litchfield starts research for Oracle Forensics Tool (FEDS)
29 Mai 2007 von Alexander Kornbrust.
On the AusCERT2007 conference David Litchfield said that he start the research on a new project called FEDS (Forensic Examiners’ Database Scalpel).
More information here
Geschrieben in Forensics, David Litchfield, Oracle Security | Keine Kommentare »
Mary Ann Davidson: Applications will have to defend themselves from attacks
29 Mai 2007 von Alexander Kornbrust.
Mary Ann Davidson gave one of their famous talks on the AusCERT 2007. (”Every Marine fights… which means they know how to defend themselves”).
According to Mary Ann Davidson (Oracle CSO), applications will have to defend themselves from attack in the future.
How can a software defend from attacks? Every Marine has a weapon (M16) so probably attacking attackers is the best approach. This means we need also weapons for the database… After 3 invalid login attempts Oracle could ban the IP or start a denial of service (d.o.s.) attack against the bad ip address/address range. This could be a nice talk for one of the next security conferences.
I think this is the wrong approach. I agree with Mary Ann that developers (even Oracle developers) should develop good and secure code.
Geschrieben in Mary Ann, Oracle Security | Keine Kommentare »