数据库安全与企业管理器融合解决方案.ppt

强调合规性检查。通过Oracle最佳实践、PCI（支付卡行业）等合规标准的检查，发现问题并及时纠正数据库配置等问题。 Add a quote… * That is exactly the problem we are trying to solve. Our solution is designed to give you a unified and complete solution that deals with the breadth and depth of your enterprise. It offers you a guide path to setup, consume, and manage cloud services and is particularly optimized for Oracle products. * Key takeaways: - Virtualization is not the only option * Traditional method is time consuming and inefficient, while DBaaS quick and simple. * * * 模拟情况下 访问的应用不同、时间点不同，对资源的消耗不同 * Database Replay focuses on recording and replaying of the workload that is directed to the RDBMS. Therefore recording of the workload is done at the point indicated in the above diagram. Recording at the RDBMS within the software stack makes it possible to exchange anything below this level and test the new setup using the record and replay functionality. While replaying the workload, the RDBMS performs the actions observed during recording. In other words, during the replay phase the RDBMS code is exercised in a very similar way as it was exercised during the recording phase. This is achieved by recreating all external client requests to the RDBMS. External client requests include all the requests by all possible external clients of the RDBMS. * * * * * 议程 Oracle数据库安全解决方案介绍 EM企业管理器方案介绍 参考案例分析 目录 Oracle数据库安全解决方案介绍 EM企业管理器方案介绍 参考案例分析 1 2 3 Audit Vault 案例一 山东移动AVDF部署架构 （1）DBFW 数据库 报文镜像 交换机（备） 应用 服务器 交换机(主) 17 18 案例一 山东移动AVDF总结 通过针对营收系统数据库的监控，AVDF快速展现了： AVDF可以主动学习和了解被保护数据库的SQL情况；通过制定白名单、黑名单及例外策略来实现对数据库的保护 AVDF的驾驶舱，可实时洞察数据库当前正遭遇的安全压力和威胁趋势 AVDF可对危险操作进行告警和拦截 AVDF的行为追踪功能，可以协助日后安全事件的调查 AVDF的SQL注入阻止功能， 可以在应用层面防止黑客的入侵 AVDF丰富的报表功能，通过多个视角、多个维度来分析和展示数据库系统在安全方面的运行状况。 案例二 江苏移动AVDF主要保护点 对第三方维护人员的行为进行追踪和审计 对数据库存储过程／用户角色权限更改进行审计 对数据库登陆进行追踪和审计 对嫌疑人的行为进行追踪和审计 对数据库对象的访问进行追踪和审计 对新员工、离职员工的行为进行追踪和审计 对数据库管理员的行为进行追踪和审计 对非授权IP的访问提出告警 对规避应用逻辑的访问提出告警 对敏感数据的访问提出告警 对SQL注入提出告警 案例三 中国电信Data Masking客户总结 针对电信ITSM服务管理系统的Data Masking： Data ma