Oracle Incident Response and Forensics

Take the right steps when a breach of your Oracle Database environment becomes known or suspected. You will learn techniques for discerning how an attacker got in, what data they saw, and what else they might have done.
This book helps you understand forensics in relation to Oracle Database, and the tools and techniques that should be used to investigate a database breach. You will learn the measures to put in place now to make it harder for an attack to be successful, and to aid in the detection and investigation of future attacks. You will know how to bring together tools and methods to create a holistic approach and investigation when an event occurs, helping you to be confident of your ability to react correctly and responsibly to threats against your organization's data.
What You'll Learn

• Detect when breaches have or may have occurred

• React with confidence using an organized plan

• Determine whether a suspected breach is real

• Determine the scope of data that has been compromised

• Preserve evidence for possible criminal prosecutions

• Put in place measures to aid future investigations Who This Book is For
  Database administrators, system administrators, and other technology professionals who may be called upon to investigate breaches of security involving Oracle Database

  Aids database professionals in responding correctly and with confidence to suspected data breaches Author is both an Oracle ACE for his work on security, and a member of the OAKTable Network of Oracle scientists Helps readers put measures in place now to aid in future investigations when breaches occur

  Autorentext
  Pete Finnigan is the founder and CEO of PeteFinnigan.com Limited, a company based in York, UK that specializes in helping customers secure data held in their Oracle databases. He has assisted customers all over the world in performing security audits of their Oracle databases. He also has assisted clients with Oracle incident response and forensics, and design and implementation work on Oracle features such as Virtual Private Database (VPD), encryption, masking, and many more services. Pete also provides very popular detailed training on many aspects of Oracle Security. He has spoken many times at conferences around the world on the subject of Oracle security. Pete is an Oracle ACE for security and also a member of The OAKTable network of Oracle scientists. He graduated from university in Leeds, UK with an honors degree in electronics and electrical systems.

Pete authored the books SANS Oracle Step-byStep Guide version 1 and version 2 and also co-authored the book Expert Oracle Practices. He can be found on Linked In, Facebook, Twitter, and his company's website.

Inhalt

1. Introduction.- 2. Artifacts.- 3. Incident Response Approach.- 4. Reacting to An Incident.- 5. Forensic Analysis.- 6. What To Do Next.