[ISN] Oracle database admins acknowledge security gaps

From: InfoSec News <alerts_at_private>
Date: Wed, 13 Oct 2010 01:36:47 -0500 (CDT)
http://www.networkworld.com/news/2010/101110-oracle-security-gaps.html

By Ellen Messmer
Network World
October 11, 2010 

Database security is rife with pitfalls, according to 430 Oracle 
database administrators surveyed by the Independent Oracle Users Group.

According to the results of the survey released last month, fewer than 
30% encrypt personally identifiable information in all their databases, 
while about 75% acknowledge their organizations do not have a means to 
prevent privileged database users from reading or tampering with human 
resources, financial or other business application data in their 
databases.

"There are still a lot of holes," says Andrew Flower, president of the 
IOUG president and vice president LoganBritton. "One of the biggest 
risks is stealing data internally," he acknowledges, saying the survey 
shows organizations aren't applying sufficient resources to improve 
security, and that there's been little change in the results from last 
year's survey.

About two-thirds of the survey respondents admitted there was no way in 
their organizations to detect or prove that the database administrators 
were not abusing their privileges.

[...]


___________________________________________________________      
Tegatai Managed Colocation: Four Provider Blended
Tier-1 Bandwidth, Fortinet Universal Threat Management,
Natural Disaster Avoidance, Always-On Power Delivery 
Network, Cisco Switches, SAS 70 Type II Datacenter. 
Find peace of mind, Defend your Critical Infrastructure.
http://www.tegataiphoenix.com/
Received on Tue Oct 12 2010 - 23:36:47 PDT

This archive was generated by hypermail 2.2.0 : Tue Oct 12 2010 - 23:50:10 PDT