Chapter 3. Securing Data at Rest

In this chapter we will cover:

  • Using block device encryption
  • Using filesystem encryption with eCryptfs
  • Using DBMS_CRYPTO for column encryption
  • Using Transparent Data Encryption for column encryption
  • Using TDE for tablespace encryption
  • Using encryption with data pump
  • Using encryption with RMAN

Introduction

The Oracle physical database files are primarily protected by filesystem privileges. An attacker who has read permissions on these files will be able to steal the entire database or critical information such as datafiles containing credit card numbers, social security numbers, or other types of private information. Other threats are related to data theft from storage mediums where the physical database resides. The same ...

Get Oracle 11g Anti-hacker's Cookbook now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.