Security Basics mailing list archives

Secure connections to oracle


From: sfmailsbm () gmail com
Date: 6 Mar 2006 12:24:31 -0000

Dear List,

Developing application to talk with Oracle 10g database from Windows platform. 

Oracle Data Provider (ODP) .NET is going to be used to provide connectivity

Connectivity will be used by application to connect to the Oracle DB

What are the security issues in this implementation?

1. Is the ODP .NET connection encrypted? (as per the docs I have seen, there is no mention of encryption)

2. User credentials will have to be 'hard-coded', which means that someone with access to the scripts will be able to 
extract the UserID/Password to connect to the database. Are there ways to protect the script?

3. Any other security issues with this setup?

thank u all for ur help

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


Current thread: