Instructions on proactively ensuring the safety and security of Oracle data are found in this innovative guide to Oracle Forensics techniques. Packed with insights and expert tips, this definitive reference provides strategies for protecting critical data from a variety of outside threats and for boosting the overall effectiveness of Oracle firewalls. Additional instructions for developing an automated framework for accessing database security make this required reading for any Oracle database administrator.
Paul M. Wright is recognized as the father of Oracle Forensics and holds the GIAC Oracle Security qualification (GSOC) Gold level as well as the GIAC Forensics qualification (GCFA). He lives in London. Donald K. Burleson is the author of 30 Oracle-related books, including Oracle Silver Bullets and Oracle Solid State Disk Tuning. He lives in Kittrell, North Carolina.
This review is from: Oracle Forensics: Oracle Security Best Practices (Oracle In-Focus series) (Paperback)
Oracle Forensics - Best Practices, Sets the Scene on the science of establishing the Who, What, Where and When of dealing with Oracle security issues from a defensive and reactive standpoint. Published in 2007 I would say this book was ahead of it's time, defining the union of Computer Forensics and Oracle Security. The book is mainly practically oriented and takes a reader with average skills to expert incident handler. I like the ideas about centralised syslog and time security. There is a lot of vulnerability research as well to feed the likely issues that a forensic investigator is likely to see, but the vulnerabilities are becoming dated and I would like to see more about the Why ... not just Who, What, Where and When... but the Why? - in the form of Forensic Psychology - i.e. what causes people to carry out cybercrimes. But in terms of applied Oracle Forensics this the defining technical text. I would also check out Kevvie Fowler's SQL Server Forensics book and David Litchfield's papers which followed after this, as well as Pete Finnigan's site. There is a more detailed review of over at the ACM reviews site but in conclusion this is a good book worth the time investment of reading it.
Help other customers find the most helpful reviews