15_le_14_OLS数据库安全审计.pptVIP

Implementing Oracle Label Security Objectives After completing this lesson, you should be able to implement a simple Oracle Label Security policy by: Creating policies Defining data labels Applying policies to tables Setting up user authorizations Implementing the Oracle Label Security Policy The steps to implement an Oracle Label Security solution are: Develop a strategy to understand the security problem. Analyze the data levels in the application. Create policies. Define data labels. Apply the policies. Assign user authorizations. Review and document your policy decisions. Full Notes Page Step 3: Create Policies Create the policy to contain the label information: Set the Policy name to FACILITY. Set the Policy label column to FACLAB. Set the Default access options. Policy Enforcement Options Access-control enforcement: READ_CONTROL WRITE_CONTROL Label-management enforcement: LABEL_DEFAULT LABEL_UPDATE CHECK_CONTROL Options to override enforcement: ALL_CONTROL NO_CONTROL Step 4: Define Labels: Overview Labels have three parts: Level Group (optional) Compartment (optional) Every label must have a level. The label is defined on the basis of the combinations of the parts. Defining Levels These levels are part of the label that is assigned to users and data. The SENSITIVE data level has a: Short name of S Numeric tag of 300 Creating Levels Defining Groups For the group WR_FINANCE: WR_FIN will appear in the group field of the level:compartment:group label The parent group is WESTERN REGION Creating Groups Defining Compartments Optional compartments are OP, CH, and FIN. FIN could appear in the Compartment field of the level:compartment:group label. Example: Label S:OP,CH: Creating Compartments Identifying Data Labels The administrator creates a set of data labels that are actually used from the components already defined. Creating Data Labels Access Mediation The user is assigned the Sensitive label S::. The user label dominates the data label. Sensitive: Acces