Oracle databases have increasingly been used to deploy and power the web based applications fronting the Internet, and thus exposing to possibility of malicious and violent security attacks, hack or crack attempts, and exploit threats from both internal and external source. How to harden and hack proofing the Oracle database, products and services have became urgent and critical task. Oracle has published a guide on how to “Hack Proofing Oracle” by Howard Smith, as part of Deploying, Managing Administering Oracle Internet Platform series of article as strategy to fight more serious threats awaiting Oracle users.
The “Hack Proofing Oracle” article is hosted on Scribd.com, and re-published on Tip and Trick (TnT). IT Professional especially Oracle administrators can click on “Scribd” button to go to Scribd site, and then click on “Download” button to download the article in PDF or TXT format. JavaScript support enabled required.
Deploying, Managing, and Administering the Oracle Internet Platform +$&. 3522),1* 25$&/( +RZDUG 6PLWK 2UDFOH &RUSRUDWLRQ 8. /LPLWHG %HIRUH WKH ,QWHUQHW UHYROXWLRQ 2UDFOH SURGXFWV DQG VHUYLFHV ZHUH VR ZHOOKLGGHQ LQ WKH GDUNHVW GHSWKV RI RXU FXVWRPHUV· GDWD FHQWUHV WKDW WKH\ VLPSO\ GLGQ·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·V SURGXFWV DQG VHUYLFHV PLJUDWH IURP WKH EDFN RIILFH WR WKH IURQW OLQH WKH VRIWZDUH WKDW SRZHUV WKH ,QWHUQHW DQG WKH FRPSDQ\ EHKLQG LW LV ZHOOSUHSDUHG IRU WKH RQVODXJKW RI PDOLFLRXV LQWHUQDO DQG H[WHUQDO VHFXULW\ DWWDFNHUV 7KLV SDSHU DGGUHVVHV KRZ 2UDFOH LV UHVSRQGLQJ WR WKH WKUHDW ZLWK LWV RZQ ´KDFN WHDPµ SDUW DQG PDNHV VRPH VXJJHVWLRQV IRU LPSURYLQJ GDWDEDVH DSSOLFDWLRQ VHFXULW\ SDUW 3$57 5(6321′,1* 72 7+( 7+5($7 $V WKH FRPSDQ\ IRU ,QWHUQHW FRPSXWLQJ ZH WDNH VHFXULW\ VHULRXVO\ DQG ZHEEDVHG FRPSXWLQJ UHTXLUHV DOWHUQDWLYH DSSURDFKHV WR VHFXULW\ &XVWRPHUV DUH OLNHO\ WR UDLVH EXJV KDFNHUV DUH QRW :H FDQQRW UHO\ RQ H[WHUQDO VHFXULW\ FRPSDQLHV· 5 ‘ HIIRUW WR ILQG RXU RZQ VHFXULW\ EXJV IRU XV 1R H[WHUQDO DJHQF\ ZLOO ILQG EXJV LQ D WLPHIUDPH WKDW ZRXOG VXLW RXU GHYHORSPHQW OLIHF\FOH QRU FDQ ZH UHO\ RQ WKHP WR EH RQH VWHS DKHDG RI WKH KDFNHUV :H KDYH WKHUHIRUH EURXJKW WKH KDFNHUV LQ KRXVH ZLWK RXU RZQ VHFXULW\ DVVXUDQFH JURXS 7KLV JURXS ZDV IRUPHG LQ WR KDQGOH RXU 86 JRYHUQPHQW ´2UDQJH %RRNµ VHFXULW\ HYDOXDWLRQV DQG QRZ DGGLWLRQDOO\ KDV GXWLHV WKDW LQFOXGH • SHUIRUPLQJ LQ GHSWK ´QR KROGV EDUUHGµ VHFXULW\ DVVHVVPHQWV RI 2UDFOH·V SURGXFWV DQG VHUYLFHV E\ • • • • • PRXQWLQJ H[WHUQDO ´KDFNHUµ DWWDFNV RQ 2UDFOH·V ,QWHUQHW DQG LQWUDQHW VHUYLFHV DQG SHUIRUPLQJ VHFXULW\ DVVHVVPHQWV RI 2UDFOH SURGXFWV SURYLGLQJ ´OHVVRQV OHDUQHGµ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·V RZQ RQOLQH SURGXFWV DQG VHUYLFHV DQG LQGHSHQGHQW DVVHVVPHQWV RI LQVWDOODEOH SURGXFWV Deploying, Managing, and Administering the Oracle Internet Platform (;7(51$/ $77$&.6 $WWDFNV DUH W\SLFDOO\ PRXQWHG YLD WKH ,QWHUQHW RU LQWUDQHW DQG IROORZ WKH VDPH DSSURDFK XVHG E\ D KDFNHU 7KHVH DWWDFNV DUH FRQGXFWHG XVLQJ D PL[WXUH RI LQKRXVH VWDII DQG H[WHUQDO DJHQFLHV 7KLV HQVXUHV WKDW WKH KLJKHVW VWDQGDUGV DUH PDLQWDLQHG DQG WKDW XSWRGDWH WHFKQLTXHV DUH XVHG %\ XVLQJ D ´RQH WHDPµ DSSURDFK ZH FDQ PDUU\ 2UDFOH H[SHUWLVH ZLWK WKH QHWZRUNLQJ H[SHUWLVH RI WKH VSHFLDOLVW VHFXULW\ DJHQF\ 352'8&7 $66(660(176 $ SURGXFWV DVVHVVPHQWV LV D ´QR KROGV EDUUHGµ DWWDFN RQ D FDQGLGDWH 2UDFOH SURGXFW 7KHVH DVVHVVPHQWV XVXDOO\ IROORZ WKH IROORZLQJ SDWWHUQ • D SURFHVV RI GHYHORSLQJ XQGHUVWDQGLQJ IRU H[DPSOH • • • • • • • • • ZKDW VHFXULW\ IHDWXUHV DUH RIIHUHG E\ WKH SURGXFW WKH HQYLURQPHQW LQ ZKLFK WKH SURGXFW RSHUDWHV WKH SURGXFW·V DUFKLWHFWXUH DQG XVLQJ WKH SURGXFW ,QWHUQHW VRXUFHV HJ &(57 KDFNLQJ VLWHV NQRZQ EXJV H[SHULHQFH RI VLPLODU SURGXFWV DQG DUFKLWHFWXUHV UHYLHZ RI DYDLODEOH VRXUFHV IRU NQRZQOLNHO\ YXOQHUDELOLWLHV IRU H[DPSOH GHVLJQ DQG LPSOHPHQW SHQHWUDWLRQ WHVWV $ VHFXULW\ DVVHVVPHQW PD\ EH FDUULHG RXW LQKRXVH RU SHUIRUPHG LQ FRQMXQFWLRQ ZLWK D FRQWUDFWHG WKLUG SDUW\ 7KHUH DUH YDULRXV OHYHOV RI DVVHVVPHQW GHSHQGLQJ RQ WKH LQIRUPDWLRQ SURYLGHG WR WKH DVVHVVPHQW WHDP 7KHVH DUH VXPPDULVHG LQ WDEOH EHORZ /HYHO 5LVN $VVHVVPHQW 'HVFULSWLRQ 'HVLJQHG WR EH D UDSLG GLVFRYHU\ RI WKH PDMRU YXOQHUDELOLWLHV LQ D SURGXFW 7KLV DVVHVVPHQW LV ORRVHO\ EDVHG RQ WKH ULVN DVVHVVPHQW PHWKRGRORJ\ GHVFULEHG LQ 86 )HGHUDO ,QIRUPDWLRQ 3URFHVVLQJ 6WDQGDUG ),36 7KLV DVVHVVPHQW LV SHUIRUPHG LQ FORVH FRQVXOWDWLRQ ZLWK WKH SURGXFW GHYHORSHUV DQG LV FRQGXFWHG DV D VHULHV RI LQWHUYLHZV 7KLV DVVHVVPHQW LV SHUIRUPHG ZLWK PLQLPDO LQYROYHPHQW RI WKH GHYHORSHUV DQG DWWHPSWV WR VLPXODWH WKH ZRUVW DQ H[WHUQDO DWWDFNHU FDQ GR 7KH DVVHVVPHQW LV FRQGXFWHG ZLWK DFFHVV UHVWULFWHG WR RQO\ SXEOLFO\ DYDLODEOH DQG SXUFKDVDEOH LQIRUPDWLRQ DQG WKH SURGXFW LWVHOI 7KLV DVVHVVPHQW SURYLGHV DVVHVVRUV ZLWK DFFHVV WR WKH GHVLJQ GRFXPHQWDWLRQ DQG VRXUFH FRGH IRU WKH SURGXFW 3HQHWUDWLRQ WHVWV ZLOO EH LPSOHPHQWHG EDVHG RQ D NQRZOHGJH RI WKH SURGXFW·V LQWHUQDO DUFKLWHFWXUH DQG DOJRULWKPV $ IRUPDO HYDOXDWLRQ WR ,62 &RPPRQ &ULWHULD IRU ,QIRUPDWLRQ 7HFKQRORJ\ 6HFXULW\ (YDOXDWLRQ ,62 LV DQ LQWHUQDWLRQDOO\UHFRJQLVHG VWDQGDUG IRU HYDOXDWLRQV LQWHJUDWLQJ DQG UHSODFLQJ QDWLRQDO VFKHPHV VXFK DV WKH 86 7UXVWHG &RPSXWHU 6\VWHPV (YDOXDWLRQ &ULWHULD 7&6(& RU ´2UDQJH %RRNµ DQG (XURSHDQ ,QIRUPDWLRQ 7HFKQRORJ\ 6HFXULW\ (YDOXDWLRQ &ULWHULD ,76(& 7KHVH DVVHVVPHQWV DUH SHUIRUPHG E\ FRQWUDFWHG VSHFLDOLVW WHVW ODERUDWRULHV ZKRVH VWDQGDUGV DUH PDLQWDLQHG E\ LQWHUQDWLRQDOO\UHFRJQLVHG VWDQGDUGV RUJDQLVDWLRQV 7DEOH 6HFXULW\ 3URGXFW $VVHVVPHQW /HYHOV %ODFN %R[ :KLWH %R[ )RUPDO (YDOXDWLRQ Deploying, Managing, and Administering the Oracle Internet Platform $ NH\ RXWSXW RI WKH DVVHVVPHQW LV WR HQVXUH WKDW WKH GHIDXOW LQVWDOODWLRQ RI WKH SURGXFW DQG DQ\ H[DPSOHV SURYLGHG DUH VHFXUH ,Q DQ DJH ZKHQ GHIDXOW DFFRXQWV DQG RWKHU H[DPSOHV RI ZHDN LQVWDOOHG FRQILJXUDWLRQV DUH UHJXODUO\ KLJKOLJKWHG DV PDMRU VHFXULW\ LVVXHV LW LV LPSRUWDQW WKDW 2UDFOH·V SURGXFW DUH RU EHFRPH ´VHFXUH RXW RI WKH ER[µ 7KH VWHSV GHVFULEHG LQ SHUIRUPLQJ EODFN DQG ZKLWH ER[ SURGXFW DVVHVVPHQWV DUH ORRVHO\ EDVHG RQ WKRVH XVHG ZKHQ SHUIRUPLQJ D IRUPDO HYDOXDWLRQ RI D SURGXFW DJDLQVW ,62 &RPPRQ &ULWHULD IRU ,QIRUPDWLRQ 7HFKQRORJ\ 6HFXULW\ (YDOXDWLRQ :H LQWHQG WR LQWHJUDWH WKLV IRUPDO HYDOXDWLRQ SURFHVV ZLWK RXU LQIRUPDO SURGXFW DVVHVVPHQWV 6XFK LQWHJUDWLRQ VKRXOG SURYLGH D GHJUHH RI IRUPDO DVVXUDQFH LQ WKH VHFXULW\ RI 2UDFOH·V SURGXFWV DQG VHUYLFHV 7KLV UHIOHFWV 2UDFOH·V FRQWLQXLQJ FRPPLWPHQW WR IRUPDO HYDOXDWLRQV ZKHUH 2UDFOH UHPDLQV D ZRUOG OHDGHU ZLWK PRUH FRPSOHWHG HYDOXDWLRQV WKDQ DQ\ RWKHU SURGXFW YHQGRU ,1&,'(17 6833257 (YHQ WKH EHVW DVVHVVPHQW SURFHVV FDQQRW KRSH WR ILQG DOO YXOQHUDELOLWLHV DQG WKHUHIRUH WKH VHFXULW\ DVVXUDQFH JURXS SDUWLFLSDWH LQ WKH LQFLGHQW KDQGOLQJ SURFHVV ,W LV WKH LQYROYHPHQW RI WKH VHFXULW\ DVVXUDQFH JURXS WKDW DOORZV 2UDFOH WR EUHDN RXW RI WKH YLFLRXV ´3HQHWUDWH DQG 3DWFKµ F\FOH 7KH PDLQ DFWLRQV RI WKH VHFXULW\ DVVXUDQFH JURXS GXULQJ DQ LQFLGHQW DUH • • • • WR SURGXFH H[SORLW VFULSWV IRU WKH YXOQHUDELOLW\ LI WKH\ KDYH QRW EHHQ SURYLGHG DQG WR SHUIRUP DGGLWLRQDO WHVWLQJ WR VHH LI REYLRXV VLPLODU YXOQHUDELOLWLHV H[LVW WR FRQVLGHU LPSOLFDWLRQV EH\RQG WKH FXUUHQW YXOQHUDELOLW\ LH ZKHWKHU RWKHU SURGXFWV DUH DIIHFWHG WR UHYLHZ WKH SURSRVHG IL[ DQG GHFLGH LI LW IL[HV WKH SUREOHP RU PLWLJDWHV WKH XQGHUO\LQJ WKUHDW WKH REYLRXV IL[ VRPHWLPHV LVQ·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• • • •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´OLVWHQVµ IRU LQFRPLQJ FRQQHFWLRQ UHTXHVWV DQG WKHQ KDQGV WKHP RYHU WR WKH UHTXHVWHG GDWDEDVH $ OLVWHQHU FDQ DOVR UHVSRQG WR QHWZRUN UHTXHVWV E\ LWVHOI 2QH VXFK UHVSRQVH LV WR WKH ´VWDWXVµ UHTXHVW 7KH UHVXOWV RI D VWDWXV UHTXHVW DUH LOOXVWUDWHG LQ ILJXUH ,W FDQ EH VHHQ WKDW • • WKH VWDWXV UHTXHVW LV VDWLVILHG HYHQ LI WKH OLVWHQHU LV FRQILJXUHG ZLWK D SDVVZRUG 6HFXULW\ LV 21 WKH KRVW RSHUDWLQJ V\VWHP :LQGRZV 17 LV UHYHDOHG YDOXDEOH LQIRUPDWLRQ IRU DQ DWWDFNHU QR QHHG WR WU\ 81,;VSHFLILF DWWDFNV RQ WKLV KRVW Deploying, Managing, and Administering the Oracle Internet Platform •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arah\ VR WKDW LI ZH GR JHW LQWR WKLV V\VWHP ZH NQRZ ZKHUH WKH GDWD LV VWRUHG QRZ WKH DYDLODEOH VHUYLFHV DUH UHYHDOHG PLSExtProc DQG sarah1 7KH VDUDK VHUYLFH LV DOPRVW FHUWDLQO\ D GDWDEDVH DQG NQRZLQJ LWV VHUYLFH QDPH ZH FDQ QRZ DWWHPSW D GDWDEDVH FRQQHFWLRQ XVLQJ 64/ 3OXV • • • • • )LJXUH 7KLV ILJXUH LOOXVWUDWHV WKH YROXPH RI LQIRUPDWLRQ DQ 2UDFOH /LVWHQHU FDQ UHYHDO WR DQ DWWDFNHU $V FDQ EH VHHQ D JUHDW GHDO RI XVHIXO LQIRUPDWLRQ LV SURYLGHG IRU IUHH WR DQ\RQH ZLWK D /LVWHQHU &RQWURO OVQUFWO FOLHQW DQG DV KDFNHUV VSHQG PXFK RI WKHLU WLPH SHUIRUPLQJ UHFRQQDLVVDQFH DQG VFDQQLQJ VXFK RXWSXW LV D JROGPLQH ,I WKH '%$ KDV OHIW GHIDXOW DFFRXQWV DYDLODEOH RU ZH FDQ JXHVVGHWHUPLQH D YDOLG DFFRXQW ZH·UH LQ )LJXUH LOOXVWUDWHV ZKDW D ILUHZDOO FDQ GR ,Q WKLV FDVH D VWDWXV UHTXHVW UHYHDOV QRWKLQJ QRW VR PXFK DV DQ HUURU PHVVDJH :LWKRXW NQRZLQJ WKH VHUYLFH QDPH ZH FDQ·W FRQQHFW )LJXUH :KDW D GLIIHUHQFH D ILUHZDOO PDNHV 1RW VR PXFK DV DQ HUURU PHVVDJH $W OHDVW WKH /LVWHQHU·V SDVVZRUG KDG EHHQ VHW LQ WKH H[DPSOH LQ )LJXUH :LWKRXW D SDVVZRUG WKH /LVWHQHU FDQ EH UHPRWHO\ FRQILJXUHG OHDGLQJ WR WULYLDO 'HQLDO RI 6HUYLFH DWWDFNV DW OHDVW DQG WRWDO FRPSURPLVH RI V\VWHP VHFXULW\ DW ZRUVW Deploying, Managing, and Administering the Oracle Internet Platform 1HYHU GHSOR\ D OLVWHQHU ZLWKRXW VHWWLQJ LWV SDVVZRUG 1R SDVVZRUG QR VHFXULW\ QR GDWD $OZD\V FKDQJH WKH GHIDXOW DFFRXQW SDVVZRUGV RU ³ EHWWHU VWLOO ³ ORFN WKHVH DFFRXQWV $ GHIDXOW DFFRXQW LV D EDFN GRRU ZDLWLQJ WR EH RSHQHG ,I WKH VFHQDULR LQ )LJXUH ZRUULHV \RX \RX QHHG D ILUHZDOO 2UDFOH KDV ZRUNHG ZLWK D QXPEHU RI ILUHZDOO YHQGRUV IRU WKH ODVW \HDUV RU VR DQG PDQ\ ILUHZDOOV DUH QRZ 64/ 1HW1HW DZDUH ,I \RXU GDWDEDVH RQO\ KDV D VPDOO QXPEHU RI FOLHQWV FRQQHFWLQJ WR LW HJ EHFDXVH LW PDLQO\ VHUYHV D ZHE VHUYHU LQ DQ 1WLHU HQYLURQPHQW WKHQ \RX VKRXOG FRQILJXUH 1HW WR UHVSRQG RQO\ WR FHUWDLQ ,3 DGGUHVVHV )RU PDQ\ SXUSRVHV WKDW KDV D VLPLODU HIIHFW WR D ILUHZDOO DQG LW·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www.evil_hackers.org/cgi/captureform?your_data=string " 7DEOH 7KH WXQQHO RXW RI WKH 7RZHU RI /RQGRQ 87/B+773 7KHVH SDFNDJHV DUH LPPHQVHO\ XVHIXO IRU WKH DSSOLFDWLRQV WKDW QHHG WKHP EXW XQOHVV \RX QHHG WKHP GRQ·W OHW PUBLIC KDYH WKHVH SDFNDJHV DQG GRQ·W OHW \RXU XVHUV KDYH WKHP HLWKHU $ FRXSOH RI RWKHU SDFNDJHV DUH DOVR LQWHUHVWLQJ IURP WKH VHFXULW\ SRLQW RI YLHZ 7KHVH DUH VKRZQ LQ WDEOH 3DFNDJH 1DPH '%06B5$1'20 'HVFULSWLRQ 5DQGRP QXPEHUV DUH VRPHWLPHV XVHG LQ GDWDEDVH FU\SWRJUDSKLF DSSOLFDWLRQV 2UDFOH SURYLGHV D SVHXGR UDQGRP QXPEHU JHQHUDWLRQ SDFNDJH DBMS_RANDOM ,Q GEPVUDQGVTO WKH VRXUFH IRU WKH SDFNDJH VXSSOLHG DV SDUW RI WKH 2UDFOH GLVWULEXWLRQ LW FOHDUO\ VWDWHV ´'R QRW XVH IRU FU\SWRJUDSK\µ 6R GRQ·W $V 5)& VWDWHV ´7KH XVH RI SVHXGRUDQGRP SURFHVVHV WR JHQHUDWH VHFUHW TXDQWLWLHV FDQ UHVXOW LQ SVHXGRVHFXULW\µ Deploying, Managing, and Administering the Oracle Internet Platform 3DFNDJH 1DPH 87/B),/( 'HVFULSWLRQ ,I WKLV SDFNDJH LV PLVFRQILJXUHG LW FDQ SHUPLW WH[W OHYHO DFFHVV WR DQ\ ILOH RQ WKH KRVW V\VWHP +RZHYHU HYHQ LI SURSHUO\ FRQILJXUHG LW GRHV QRW GLVWLQJXLVK EHWZHHQ LWV FDOOLQJ DSSOLFDWLRQV ,I DSSOLFDWLRQ $ XVHV DSSDGDWD DQG DSSOLFDWLRQ % XVHV DSSEGDWD WKHUH LV QRWKLQJ WR VWRS DSSOLFDWLRQ $ ORRNLQJ DW DSSEGDWD DQG YLFH YHUVD $Q HQG XVHU ZLWK DFFHVV WR 87/B),/( ZLOO EH DEOH WR ZULWH DUELWUDU\ GDWD WR HLWKHU ORFDWLRQ VD\ D ID[ RXWSXW TXHXH 7DEOH 0RUH LQWHUHVWLQJ 3/64/ SDFNDJHV 7$.( 6(&85,7< 72 7+( '$7$ 127 7+( '$7$ 72 7+( 6(&85,7< 0DQ\ DSSOLFDWLRQV SHUIRUP DOO WKHLU VHFXULW\ FKHFNV LQ WKH FOLHQWVLGH DSSOLFDWLRQ 7KH HQWLUH VHFXULW\ RI VXFK DSSOLFDWLRQV UHVWV LQ WKH DELOLW\ WR VWRS XVHUV PDNLQJ GLUHFW FRQQHFWLRQV WR WKH GDWDEDVH YLD 64/ 3OXV RU RWKHU XWLOLWLHV $ VXPPDU\ RI WKH DGYDQWDJHV DQG GLVDGYDQWDJHV RI WZR RI WKH DSSURDFKHV WDNHQ WR DFKLHYH WKLV HIIHFW DUH LOOXVWUDWHG LQ WDEOH 3UHFDXWLRQ +LGLQJ 64/ 3OXV ,VVXHV $ FRPPRQ DSSURDFK WR SUHYHQWLQJ JLYLQJ XVHUV GLUHFW DFFHVV WR WKH GDWDEDVH LV WR SUHYHQW DFFHVV WR XWLOLWLHV VXFK DV 64/ 3OXV $VVXPLQJ XVHUV DUH XQDEOH WR GRZQORDG RU LQVWDOO WKHLU RZQ FRS\ RI 64/ 3OXV PD\ EH UHDOLVWLF EXW ZLWK WKH DGYHQW RI WKH -DYD WKLQ FOLHQW LW LV SRVVLEOH WR FRQVWUXFW GDWDEDVH FOLHQWV XVLQJ RQO\ D ZHE EURZVHU DV WKH FOLHQW LQWHUIDFH ,Q DGGLWLRQ 2'%& PD\ DOVR SURYLGH XVHIXO GDWDEDVH DFFHVV %\ REIXVFDWLQJ WKH 2UDFOH SDVVZRUG LQ VRPH IDVKLRQ XVHUV FDQ EH SUHYHQWHG IURP ORJJLQJ RQ WR WKH GDWDEDVH EHFDXVH WKH\ ZLOO QRW NQRZ WKH 2UDFOH XVHUQDPH RU SDVVZRUG 7KH VHFXULW\ LQ WKLV DSSURDFK HQWLUHO\ GHSHQGV RQ SUHYHQWLQJ WKH DWWDFNHU IURP EHLQJ DEOH WR ZRUN RXW WKH VHFXULW\ PHFKDQLVP EHLQJ HPSOR\HG %XW IRU H[DPSOH UXQQLQJ WKH FOLHQW DSSOLFDWLRQ LQ D GHEXJJHU DQG WUDSSLQJ RQ WKH H[HFXWLRQ RI WKH 2&, ORJRQ URXWLQH ZRXOG WULYLDOO\ UHYHDO WKH 2UDFOH XVHUQDPH DQG SDVVZRUG 7DEOH &DQ ZH VWRS XVHUV FRQQHFWLQJ WR D GDWDEDVH" 3DVVZRUG KLGLQJ *LYHQ WKH GLIILFXOW\ RI SUHYHQWLQJ XVHU OHYHO DFFHVV WR WKH GDWDEDVH RWKHU DSSURDFKHV DWWHPSW WR OLPLW XVHUV GDWDEDVH IDFLOLWLHV RQFH FRQQHFWHG 6RPH RI WKHVH WHFKQLTXHV DUH GLVFXVVHG LQ WDEOH 3UHFDXWLRQ 3DVVZRUG 3URWHFWHG 5ROH ,VVXHV ,Q WKLV PHWKRG D VSHFLDO SDVVZRUG SURWHFWHG UROH LV JUDQWHG WR WKH XVHU 7KH SDVVZRUG LV NQRZQ RQO\ WR WKH DSSOLFDWLRQ DQG VR DOWKRXJK D XVHU FDQ ORJ RQ WR WKH GDWDEDVH KH ZLOO QRW EH DEOH WR HQDEOH WKH GDWDEDVH UROH 7KH VHFXULW\ LQ WKLV PHWKRG HQWLUHO\ GHSHQGV RQ WKH FOLHQW DSSOLFDWLRQ VHFXULW\ ,I D XVHU FDQ UHWULHYH WKH SDVVZRUG IURP WKH DSSOLFDWLRQ WKHQ KH FDQ HQDEOH WKH UROH DQG FRQWLQXH XQKLQGHUHG $V LQ WKH SUHYLRXV H[DPSOH D GDWDEDVH UROH RU UROHV PXVW EH HQDEOHG LQ RUGHU IRU WKH XVHU WR JDLQ DFFHVV WR WKH DSSOLFDWLRQ GDWD +RZHYHU D XVHU FDQ VWLOO PDQXDOO\ IROORZ WKH VWHSV WDNHQ E\ WKH DSSOLFDWLRQ WR HQDEOH WKH UROH IRU H[DPSOH • • • H[HFXWLQJ WKH SURFHGXUH WKDW HQDEOHV WKH UROH H[HFXWLQJ WKH IXQFWLRQ WKDW UHWXUQV WKH VHFUHW SDVVZRUG RU 6(/(&7LQJ WKH SDVVZRUGV IURP D GDWDEDVH WDEOH 5ROH HQDEOHG WKURXJK 3/64/ Deploying, Managing, and Administering the Oracle Internet Platform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·V 3/64/ :5$3 XWLOLW\ DQ DWWDFNHU FDQ YLHZ WKH 3/64/ VRXUFH WR GHWHUPLQH ZKLFK SURFHGXUHV WR H[HFXWH 7DEOH 0HWKRGV WR OLPLW XVHUV DFWLYLWLHV RQFH ORJJHG LQ :LWK 2UDFOHL QHZ IHDWXUHV DUH SURYLGHG WKDW WRJHWKHU FDQ KHOS VHFXUH DSSOLFDWLRQV • • 9LUWXDO 3ULYDWH 'DWDEDVH 93' DQG 1WLHU DXWKHQWLFDWLRQ 9,578$/ 35,9$7( '$7$%$6( 7KH 93' IHDWXUH FRQVLVWV RI WZR FRPSRQHQWV • DSSOLFDWLRQ H[WHQVLEOH VHFXULW\ DWWULEXWHV DQG • D 64/ TXHU\ UHZULWH HQJLQH $SSOLFDWLRQ H[WHQVLEOH VHFXULW\ DWWULEXWHV SURYLGH D VHFXUH VWRUDJH DUHD IRU DSSOLFDWLRQ VHFXULW\ GDWD 7KHVH DWWULEXWHV DUH VWRUHG DORQJ VLGH 2UDFOH·V RZQ VHVVLRQ GDWD VXFK DV XVHUQDPH 7KH TXHU\ UHZULWH HQJLQH LV XVHG WR UHZULWH XVHU TXHULHV EDVHG RQ WKH DSSOLFDWLRQ VHFXULW\ DWWULEXWHV PHGLDWLQJ GDWD DFFHVV E\ FKDQJLQJ WKH 64/ TXHU\ XVHG WR UHWULHYH WKH GDWD $ W\SLFDO H[DPSOH ZRXOG VWRUH D XVHU·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eploying, Managing, and Administering the Oracle Internet Platform ,6 $1<%2'< 287 7+(5(" 7KH PDLQ UHDVRQ IRU XVLQJ HQFU\SWLRQ RQ DQ LQWUDQHW LV WKDW WKHUH LV D WKUHDW WKDW FULWLFDO GDWD FDQ EH ´VQLIIHGµ RII WKH QHWZRUN ,I QRRQH LV OLVWHQLQJ WKHQ HQFU\SWLRQ EX\V YHU\ OLWWOH 6R WKH TXHVWLRQ LV ´:KR LV OLVWHQLQJ"µ &RQVLGHU • WKHUH DUH D QXPEHU RI IUHHO\ GRZQORDGDEOH WRROV ZKLFK FODLP WR EH DEOH WR VQLII SDFNHWV RI WKH QHWZRUN +RZHYHU WKHUH DUH DOVR WRROV DYDLODEOH WKDW FODLP WR EH DEOH WR GHWHFW VXFK EHKDYLRXU 'RHV \RXU RUJDQLVDWLRQ KDYH D SROLF\ RI DFWLYHO\ ORRNLQJ LQWHUQDOO\ IRU QHWZRUN VQLIIHUV" ZKHWKHU \RXU QHWZRUN WRSRORJ\ DFWXDOO\ DW ULVN" ,I \RX KDYH D VZLWFKHG QHWZRUN WKHQ FDQ DQ\RQH DFWXDOO\ VHH DQ\WKLQJ E\ UXQQLQJ D VQLIILQJ SURJUDP" • • ZKHWKHU \RX VKRXOG RXWVRXUFH" 2QH RI WKH JUHDW VDYLQJV DFKLHYHG LQ RXWVRXUFLQJ DULVHV EHFDXVH RI WKH VKDULQJ RI UHVRXUFHV EHWZHHQ RUJDQLVDWLRQV 7KDW PHDQV \RXU GDWD DQG WKDW RI \RXU JUHDWHVW ULYDO PD\ EH VWRUHG RQ WKH VDPH QHWZRUN DW \RXU RXWVRXUFLQJ RUJDQLVDWLRQ·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·W PHDQ \RX QHHG WKHP ,V \RXU 3/64/ DSSOLFDWLRQ FRGH ZUDSSHG WR SUHYHQW SU\LQJ H\HV IURP UHYHUVH HQJLQHHULQJ \RXU DSSOLFDWLRQ ORJLF" &DQ \RXU DSSOLFDWLRQ·V VHFXULW\ EH LPSURYHG E\ XVLQJ WKH 9LUWXDO 3ULYDWH 'DWDEDVH IHDWXUH" &DQ \RXU DSSOLFDWLRQ PDNH XVH RI 1WLHU DXWKHQWLFDWLRQ" 'R \RX WKLQN DQ\RQH PLJKW EH OLVWHQLQJ RQ \RXU QHWZRUN" )RU H[DPSOH GR \RX VKDUH QHWZRUN IDFLOLWLHV LQ D %% HQYLURQPHQW RU KDYH \RX RXWVRXUFHG VRPH DVSHFWV RI QHWZRUN PDQDJHPHQW" ,I VR WKHQ FRQVLGHU LPSOHPHQWLQJ 2UDFOH $GYDQFHG 6HFXULW\ 7DEOH VPDOO VWHSV WR 6HFXULW\ +HDYHQ :HOO LW·V D VWDUW… á &21&/86,21 7KLV SDSHU KDV GHVFULEHG 2UDFOH·V VWUDWHJ\ IRU PHHWLQJ WKH HPHUJLQJ WKUHDW IDFLQJ LWV SURGXFWV 7KH WKUHDW DULVHV EHFDXVH RI WKH PRYH IURP EDFN RIILFH WR ,QWHUQHWIDFLQJ DSSOLFDWLRQV LQ WKH DOO PDUNHWV %\ GHYHORSLQJ DQ LQWHUQDO HWKLFDO KDFNLQJ WHDP WKDW EXLOGV H[SORLWV EHIRUH VRPHRQH HOVH GRHV ZH EHOLHYH ZH KDYH REWDLQHG D KHDG VWDUW RYHU RXU DGYHUVDULHV %\ GHYHORSLQJ UHODWLRQVKLSV ZLWK WKH EHVW RI WKH ZRUOG·V VHFXULW\ FRQVXOWDQFLHV ZH LQWHQG WR VWD\ WKDW ZD\