Oracle Security Blog 
Oracle E-Business Suite APPS_NE Security Risks
The most recent version of the Oracle E-Business Suite, Release 12.2, introduces on-line patching to reduce downtime requirements. This new technical functionality is based on Edition-based redefinition provided by the Oracle 11gR2 database. For the...Recommended Approach for Oracle E-Business Suite 12.2 Mobile and Web Services Security
This is the eleventh and final posting in a blog series summarizing the new Oracle E-Business Suite 12.2 Mobile and web services functionality and recommendations for securing them. Deploying Internet-based Oracle E-Business Suite web services...Oracle E-Business Suite APPLSYS, APPS and APPS_NE
The evolution of the Oracle E-Business Suite since its inception in the late 1980s has gone through many significant changes. For example, I can personally remember in the late 1990s upgrading clients to release 10.5 of the E-Business Suite with the...Oracle E-Business Suite 12.2 Mobile Application Security
This is the tenth posting in a blog series summarizing the new Oracle E-Business Suite 12.2 Mobile and web services functionality and recommendations for securing them. Oracle Corporation has been building out Mobile and Smartphone applications...Oracle Unified Auditing Performance Issues and 12.2 Improvements
For those of you using and/or considering Unified Auditing, in case you might have missed, Oracle has made significant changes to Unified Auditing in 12.2. Unified Auditing, new in Oracle 12c, represents a complete rewrite of how native database...Oracle E-Business Suite 12.2 Web Services Security for Oracle Supplier Network
This is the ninth posting in a blog series summarizing the new Oracle E-Business Suite 12.2 Mobile and web services functionality and recommendations for securing them. The most common use of web services with the Oracle E-Business Suite is the...Guide to PeopleSoft Logging and Auditing - Revised Whitepaper
After discussions at Collaborate2017 with several PeopleSoft architects we have revised our Guide to PeopleSoft Auditing. The key change is the recommendation NOT to use PeopleSoft’s native database auditing and to instead use Oracle...Oracle Audit Trail Add Program Name
The program name attribute (V$SESSION.PROGRAM) is not by default passed to Oracle’s audit logs. It can be optionally included. To do so, apply Patch 7023214 on the source database. After the patch is applied, the following event needs to be set...Oracle E-Business Suite 12.2 Mobile and Web Services Security Requires Web Application Firewall (WAF)
This is the eighth posting in a blog series summarizing the new Oracle E-Business Suite 12.2 Mobile and web services functionality and recommendations for securing them. Web Application Firewalls (WAFs) cannot replace the URL Firewall, nor can...Oracle E-Business Suite 12.2 Web Services Security: Authentication and Authorization
This is the seventh posting in a blog series summarizing the new Oracle E-Business Suite 12.2 Mobile and web services functionality and recommendations for securing them. Once traffic is accepted and passed by the URL Firewall, WebLogic initiates...Oracle Listener Security New ORACLE 12.2 Firewall Feature
Service-Level ALCs is a new feature of the 12.2 Listener that allows every database service to have its own ACL. The ACL must be based on IP addresses and this feature allows multitenant pluggable databases (PDBs) to each have an ACL enforced by the...Oracle Database Listener Security Guide – Rewritten For Oracle 12.2
In October 2002 Integrigy first posted a guide to securing the Oracle Listener. Since then this whitepaper has been our most popular download. This month we rewrote the whitepaper for Oracle 12c, inclusive of 12.2 Integrigy Consulting has found...Oracle E-Business Suite Mobile and Web Services Security Explained - Starting with URL Firewall
This is the sixth posting in a blog series summarizing the new Oracle E-Business Suite 12.2 Mobile and web services functionality and recommendations for securing them. How are web services secured in Oracle 12.2? To start at the beginning, the “...Creditcard and Bank Account Decryption No Longer Possible in Oracle E-Business Suite
In January 2014 Integrigy published extensive research and recommendations on how best to secure credit cards and bank accounts within the Oracle E-Business Suite. This research is available here Oracle E-Business Suite: Credit Cards and PCI...Deploying Oracle E-Business Suite 12.2 SOAP Web Services
This is the fifth posting in a blog series summarizing the new Oracle E-Business Suite 12.2 Mobile and web services functionality and recommendations for securing them. Physically deploying SOAP-based web services for the Oracle E-Business Suite...