Practical Oracle Security

Chapter 8

Database Activity Monitoring

Solutions in this chapter:

■ Database Intrusion 101

■ Detecting Known Attack Patterns

■ Detecting Suspicious Activity

■ Tracking the Attacker

■ Adhering to Government and Industry Regulations

☑ Summary

☑ Solutions Fast Track

☑ Frequently Asked Questions

Introduction

Monitoring database activity serves many purposes. Detecting intruders is common, but you will also want to be alerted to suspicious transactions that step outside of the bounds of what you would consider “normal,” which might indicate that an authorized user was acting in an unauthorized way. For example, a database administrator could be stealing credit card numbers. Monitoring such actions helps toward fulfilling several government and industry regulations ...