Oracle自带安全特性与DBCoffer比较-Mysql Tutorial-php.cn

Home

Database

Mysql Tutorial

Oracle自带安全特性与DBCoffer比较

WBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWB

Jun 07, 2016 pm 05:02 PM

安全产品优点缺点 Oracle Database Vault 1、可以防住DBA等特权用户 2、 Oracle内部实现，应用无需改动，安装灵活 3、

安全产品

优点

缺点

Oracle Database Vault

1、可以防住DBA等特权用户

2、 Oracle内部实现，应用无需改动，安装灵活

3、很好的控制何人、何时、何地可以访问应用程序，

1、有Oracle版本要求

2、新增权限系统复杂

3、DBA将失数据库相关对像的维护管理能力

4、还没有发行官方稳定版本

5、性能方面需要考虑

透明数据加密(TDE)

1、能实现数据在存储加密

2、且上层应用完全透明访问

1、功能单一，需要与其他安全策略配合使用

Oracle Label Security

1、实现数据的行级访问控制

2、且提供图型化的配置工具

1、不能防住DBA对数据的访问

2、且安装时需停启数据数据库实例

3、设置的数据逻辑要求高，实现不灵活

虚拟专用数据库(VPD)

1、实现数据的行级访问控制，实现逻辑对数据有依赖(即必须有数据过滤条件)

2、实现不灵活，一般和其他安全策略结合使用

3、不便于大规模部署

1、不能防住DBA对敏感数据的访问

安全的应用程序角色

将数据库访问控制策略绑定到角色，，需要VPD支持

1、不能防住DBA对敏感数据的访问

细粒度审计

1、实现关于特定条件的审计，如特定时间、IP、列、值

2、此审计在Oracle内部实现，无需改动应用

1、不能防住DBA对敏感数据的访问

DBCoffer安全加固

1、能实现数据的存储加密

2、提供敏感数据的访问审计

3、能有效防止DBA等特权用户对敏感数据的访问

4、能提供特定IP、时间对数据的访问控制

5、提供敏感数据的读写控制

6、提供界面的逻辑控制，使用方便

7、对于Oracle常规应用开发接口透明

1、暂不支持行级的访问控制

2、需要大量测试来验证Oracle的应用透明

3、外部扩展多，总体逻辑复杂

4、暂只提供字段级的数据保护，当大规应用时，对性能影响大

5、由于需求的改变，软件改动大，软件的稳定性有待提高

以上纯属于个人实践后的总结，如有相关的指导或想法，希望不佞赐教，欢迎随时来信。

fnxjiabo@foxmail.com

linux

Statement

The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn

What are stored procedures in MySQL?May 01, 2025 am 12:27 AM

Stored procedures are precompiled SQL statements in MySQL for improving performance and simplifying complex operations. 1. Improve performance: After the first compilation, subsequent calls do not need to be recompiled. 2. Improve security: Restrict data table access through permission control. 3. Simplify complex operations: combine multiple SQL statements to simplify application layer logic.

How does query caching work in MySQL?May 01, 2025 am 12:26 AM

The working principle of MySQL query cache is to store the results of SELECT query, and when the same query is executed again, the cached results are directly returned. 1) Query cache improves database reading performance and finds cached results through hash values. 2) Simple configuration, set query_cache_type and query_cache_size in MySQL configuration file. 3) Use the SQL_NO_CACHE keyword to disable the cache of specific queries. 4) In high-frequency update environments, query cache may cause performance bottlenecks and needs to be optimized for use through monitoring and adjustment of parameters.

What are the advantages of using MySQL over other relational databases?May 01, 2025 am 12:18 AM

The reasons why MySQL is widely used in various projects include: 1. High performance and scalability, supporting multiple storage engines; 2. Easy to use and maintain, simple configuration and rich tools; 3. Rich ecosystem, attracting a large number of community and third-party tool support; 4. Cross-platform support, suitable for multiple operating systems.

How do you handle database upgrades in MySQL?Apr 30, 2025 am 12:28 AM

The steps for upgrading MySQL database include: 1. Backup the database, 2. Stop the current MySQL service, 3. Install the new version of MySQL, 4. Start the new version of MySQL service, 5. Recover the database. Compatibility issues are required during the upgrade process, and advanced tools such as PerconaToolkit can be used for testing and optimization.

What are the different backup strategies you can use for MySQL?Apr 30, 2025 am 12:28 AM

MySQL backup policies include logical backup, physical backup, incremental backup, replication-based backup, and cloud backup. 1. Logical backup uses mysqldump to export database structure and data, which is suitable for small databases and version migrations. 2. Physical backups are fast and comprehensive by copying data files, but require database consistency. 3. Incremental backup uses binary logging to record changes, which is suitable for large databases. 4. Replication-based backup reduces the impact on the production system by backing up from the server. 5. Cloud backups such as AmazonRDS provide automation solutions, but costs and control need to be considered. When selecting a policy, database size, downtime tolerance, recovery time, and recovery point goals should be considered.

What is MySQL clustering?Apr 30, 2025 am 12:28 AM

MySQLclusteringenhancesdatabaserobustnessandscalabilitybydistributingdataacrossmultiplenodes.ItusestheNDBenginefordatareplicationandfaulttolerance,ensuringhighavailability.Setupinvolvesconfiguringmanagement,data,andSQLnodes,withcarefulmonitoringandpe

How do you optimize database schema design for performance in MySQL?Apr 30, 2025 am 12:27 AM

Optimizing database schema design in MySQL can improve performance through the following steps: 1. Index optimization: Create indexes on common query columns, balancing the overhead of query and inserting updates. 2. Table structure optimization: Reduce data redundancy through normalization or anti-normalization and improve access efficiency. 3. Data type selection: Use appropriate data types, such as INT instead of VARCHAR, to reduce storage space. 4. Partitioning and sub-table: For large data volumes, use partitioning and sub-table to disperse data to improve query and maintenance efficiency.

How can you optimize MySQL performance?Apr 30, 2025 am 12:26 AM

TooptimizeMySQLperformance,followthesesteps:1)Implementproperindexingtospeedupqueries,2)UseEXPLAINtoanalyzeandoptimizequeryperformance,3)Adjustserverconfigurationsettingslikeinnodb_buffer_pool_sizeandmax_connections,4)Usepartitioningforlargetablestoi

See all articles