MSAMM
Back to course

Oracle Apps DBA: Keeping E-Business Suite Alive · Module 15 · Security, credentials and audit

Encryption, in transit and at rest

Lesson 158 of 184 · 3 min

What is worth encrypting here, what it protects against, and THE BACKUP NOBODY COULD DECRYPT. Encryption protects data from somebody who has obtained it, so the useful question is always: obtained HOW? Answering that decides what is worth encrypting and what is theatre. ENCRYPTION IN TRANSIT PROTECTS AGAINST SOMEBODY ON THE NETWORK. The login page over HTTPS is the obvious one — Module 10 Lesson 6 — and the connection between the application tier and the database is the one people forget, which carries every query and every result in both directions. ENCRYPTION AT REST PROTECTS AGAINST SOMEBODY WHO GETS THE FILES, AND THE BACKUP IS THE REALISTIC CASE. A database file on a running production host is protected by the host's access controls; a backup is a portable copy of the entire database that leaves the building. Module 5 Lesson 11 says it plainly: an unencrypted backup off-site is…

The full lesson is part of the course

The video, the complete written lesson and the module quiz are included in Oracle Apps DBA: Keeping E-Business Suite Alive, with a certificate on completion and a fourteen-day refund window.

See the course and enrol9 free lessons

Get the free lessons by email

We will email you a link to every free lesson in this course. No account needed, and one message only.

In this module: Module 15 · Security, credentials and audit

  1. 1What you are actually holding
  2. 2The default accounts
  3. 3The credential in the context fileFree preview
  4. 4Changing the passwords that matter
  5. 5Least privilege for a DBA team
  6. 6Auditing: what to record and what it costs
  7. 7Encryption, in transit and at rest
  8. 8Network exposure
  9. 9What breaks: four security findings
  10. 10Lab briefing · Audit an estate you did not build