Oracle Security Training with Pete Finnigan

*** NO MORE BOOKINGS AVAILABLE ****

*** Email paul.guckian@delaneyconsulting.co.uk for details of the October 2008 course ***

The course has been designed by Pete Finnigan and is up to date using all supported versions of Oracle from 9iR2 through Oracle 11g. The course is run over 2 days and includes the following topics: 

• Background to key database files, structures, configurations and files relative to security
• Oracle security tools, checklists and more
• Why audit an Oracle database
• Exploiting Oracle, SQL Injection, configuration, escalation of privilege and more
• Planning an audit
• Setting up for an audit, gathering tools, prepping laptop, people, access
• Starting the audit
• Software installed, versions and attack surface
• Enumerating users, password strength and more
• Assessing users, privileges and RBAC
• Auditing the Oracle database association with the file system
• Audit Oracle networking
• Audit the database configuration
• Specialist considerations, Credit cards, personally identifiable data and more
• Review the audit trail
• Data analysis, vulnerability assessment
• Document findings, develop a policy and deciding what to fix
• A look at some of the automated tools

A detailed course structure is available here: http://www.petefinnigan.com/training/Course_Structure.pdf

The course is delivered by Pete Finnigan, a principal consultant with years of real world experience in auditing and securing customers Oracle databases. Pete is also well known for writing and presenting extensively in the area of Oracle security. The course includes the slides and delegate notes and is delivered on customers sites.