Expert Oracle and Java Security: Programming Secure Oracle Database Applications with Java

Chapter Review

Our goal in this chapter has been to enhance the security of everything we had built so far. We accomplished that goal on the following fronts:

• We programmed Java to encode the appver user password (connection string).
• We obfuscated the Java program that does encoding/decoding.
• We accomplished secured data encryption for data being stored in the database—specifically our lists of connection strings.
• We established an administrative role that limits who can update connection strings for applications.
• We moved the application verification processes to a new, hardened Oracle database instance, apver.

In addition to working toward enhancing the security, we also delved into the following timely topics:

• Securing an Oracle user password ...