Oracle Security Blog 
Oracle Database Critical Patch Update (CPU) Planning for 2016
With the start of the new year, it is now time to think about Oracle Critical Patch Updates for 2016. Oracle releases security patches in the form of Critical Patch Updates (CPU) each quarter (January, April, July, and October). These...Oracle E-Business Suite Critical Patch Update (CPU) Planning for 2016
With the start of the new year, it is now time to think about Oracle Critical Patch Updates for 2016. Oracle releases security patches in the form of Critical Patch Updates (CPU) each quarter (January, April, July, and October). These...Basic OBIEE Enumeration Checklist
Several clients and partners have asked for this checklist lately. Posting it for those who may find it useful: If possible ask for the following: System diagram All URLs – WebLogic, Enterprise Manager and OBIEE Ask about load...DAM tools, IBM Guardium, Oracle E-Business Suite, PeopleSoft and SAP
A question we have answered a few times in the last few months is whether or not, and if so, how easy do Database Activity Monitoring (DAM) tools such as IBM Guardium support ERP platforms such as the Oracle E-Business Suite, PeopleSoft and SAP. The...Come See Integrigy at Collaborate 2015
Come see Integrigy's session at Collaborate 2015 in Las Vegas (http://collaborate.ioug.org/). Integrigy is presenting the following paper: IOUG #763 Detecting and Stopping Cyber Attacks against Oracle Databases Monday, April 13th, 9:15 - 11:30...Fine Grained Auditing (FGA) and Protecting Oracle E-Business PII Data for Executives
With the recent news about yet another database breach of Personally Identifiable Information (PII), Integrigy had a discussion with a client about how to better protect the PII data of their executives.The following Fine-Grained-Auditing (FGA)...Integrigy Database Log and Audit Framework with the Oracle Audit Vault
Most clients do not fully take advantage of their database auditing and logging features. These features are sophisticated and are able to satisfy most organization’s compliance and security requirements. The Integrigy Framework for database...Oracle Audit Vault - Oracle Client Identifier and Last Login
Several standard features of the Oracle database should be kept in mind when considering what alerts and correlations are possible when combining Oracle database and application log and audit data.Client IdentifierDefault Oracle database auditing...UPDATED: Oracle EBS SYS.DUAL PUBLIC Privileges Security Issue Analysis (CVE-2015-0393)
Oracle E-Business Suite environments may be vulnerable due to excessive privileges granted on the SYS.DUAL table to PUBLIC. This security issue has been resolved in the January 2015 Oracle Critical Patch Update (CPU).On January 24, Oracle...Oracle Audit Vault - Remedy and ArcSight Integration
Remedy Ticket System IntegrationOracle Audit Vault 12c includes a standard interface for BMC Remedy ticketing systems. You can configure the Oracle Audit Vault to connect to BMC Remedy Action Request (AR) System Server 7.x. This...Oracle EBS SYS.DUAL PUBLIC Privileges Security Issue Analysis (CVE-2015-0393)
Oracle E-Business Suite environments may be vulnerable due to excessive privileges granted on the SYS.DUAL table to PUBLIC. This security issue has been resolved in the January 2015 Oracle Critical Patch Update (CPU) and has been assigned the...Oracle Audit Vault and Compliance Reporting
The Oracle Audit Vault has seeded reports for the following compliance and legislative requirements – no additional license is required.Payment Card Industry (PCI)Sarbanes-Oxley Act (SOX)Gramm-Leach-Bliley Act (GLBA)Health Insurance Portability and...Oracle E-Business Suite 12.0 - CPU Support Ends This Quarter
Oracle E-Business Suite 12.0 Extended Support ends on January 31, 2015. Sustaining Support does not include security fixes in the form of Critical Patch Updates (CPU). The final 12.0 CPU will be the January 2015 CPU released on January...Oracle Audit Vault - Custom Reports and BI Publisher
Custom reports can be created in Oracle Audit Vault using Oracle BI Publisher. BI Publisher is an add-on to Microsoft Word and can be used to modify or create new reports.For example, to modify a new report, to meet specific corporate or...Oracle Audit Vault Reports
The Oracle Audit Vault by default installs over one-hundred (100) reports. This includes core audit reports as well as compliance reports. Reporting is a key feature of the Oracle Audit Vault and one which well-built as evidenced by the use of...