© Osama Mustafa, Robert P. Lockard 2019
O. Mustafa, R. P. LockardOracle Database Application Securityhttps://doi.org/10.1007/978-1-4842-5367-0_6

6. Secure Coding and Design

Osama Mustafa1  and Robert P. Lockard2
(1)
Amman, Jordan
(2)
Baltimore, MD, USA
 

You need to design your system to minimize the paths to get to data, keeping only the paths that are needed. As the number of paths to your data increases, your attack surface increases. You also need to separate your data from your code. People have been putting all their code and data in one common schema for more than 30 years now, which is a problem. Additionally, a common problem is when application servers connect to the database as the schema owner. Your secure design and coding practices should ...

Get Oracle Database Application Security: With Oracle Internet Directory, Oracle Access Manager, and Oracle Identity Manager now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.