Oracle Advanced Security

Oracle Advanced Security is a security option for the Oracle Database 11g Release 2. Introduced in Oracle8i, Oracle Advanced Security combines encryption of data in storage and while traveling to and from the database with strong authentication to help customers address privacy and compliance requirements:

	Transparent Data Encryption
	Network encryption
	Strong authentication

Transparent Data Encryption

Transparent Data Encryption provides easy and effective protection of stored data by transparently encrypting data (using AES with up to 256 bits, or 3DES168) at the tablespace or column level.

Network Encryption

When information travels to and from the Database, Oracle Advanced Security Option provides a high level of security by offering support for the following encryption standards:

	AES (256, 192, and 128 bits)
	3DES168 (3 and 2 keys)
	RC4 (256 and 128 bits)

Oracle Advanced Security supports both industry standard Secure Sockets Layer (SSL) encryption and an Oracle native encryption capability (Click here to see how easy it is to setup) for customers who do not want to deploy X509 Public Key Infrastructure (PKI) certificates.

Oracle Advanced Security also protects the integrity of information, making sure the message hasn't been modified since it left the source by adding an encrypted digest to the message, using SHA-1.

Strong Authentication

Passwords alone are often not secure enough, and are known for their high TCO. Combined with the weak security they provide, they should not be used on their own. Two-factor (or "strong") authentication is based on something the user has (a smart card, token, etc.) and something the user knows (a PIN or passcode). Oracle Advanced Security supports the following industry-standard authentication methods:

	Kerberos
	RADIUS (Remote Authentication Dial-In User Service)
	Secure Sockets Layer (with digital certificates)
	PKI

Oracle Advanced Security Customers TransUnion (Success Cast | Webcast | Video) ETS (Educational Testing Service) (Success Story | Success Cast (mp3) | Magazine article) Philadelphia College of Osteopathic Medicine (Success Cast (mp3)) More Oracle Advanced Security Customers Hands-On Transparent Data Encryption Configuring native network encryption Security Features Data Encryption Virtual Private Database Database Auditing Backup Encryption Export file encryption Proxy Authentication Enterprise User Security Secure Application Roles Fine Grained Auditing

Technical Information Datasheet Overview Whitepaper Transparent Data Encryption Frequently Asked Questions Technical White Paper Security Options Oracle Database Vault Oracle Advanced Security Oracle Label Security Related Technologies Database Firewall Audit Vault Data Masking (pdf) Secure Backup Oracle Database Lifecycle Management Identity Management Discussion Forums Security Audit Vault