Block SQL Injection Attacks! Use 23ai SQL Firewall to Stop Zero-Day Exploits [HOL3021].pdf

1、Use 23ai SQL Firewall to Stop Zero-Day Exploits Hands-on LabAngeline DhanaraniSeptember 11th,2024Oracle CloudWorld Copyright 2024,Oracle and/or its affiliates1AgendaOracle CloudWorld Copyright 2024,Oracle and/or its affiliates2Welcome and IntroductionOverview:Oracle SQL FirewallIntroduction to the w

2、orkshop environmentWrap up and next stepsWelcome and IntroductionBlock SQL Injection Attacks!Use 23ai SQL Firewall to Stop Zero-Day ExploitsOracle CloudWorld Copyright 2024,Oracle and/or its affiliates3Hakim LoumiSenior Product Manager,Database Security,OracleAngeline DhanaraniSenior Principal Produ

3、ct Manager,Database Security,OracleOracle CloudWorld Copyright 2024,Oracle and/or its affiliates4HostsOverviewBlock SQL Injection Attacks!Use 23ai SQL Firewall to Stop Zero-Day ExploitsOracle CloudWorld Copyright 2024,Oracle and/or its affiliates5Oracle SQL FirewallOracle CloudWorld Copyright 2024,O

4、racle and/or its affiliates6Anomaly and SQL Injection blocking and detectionBolster your resilience against:SQL Injection attacksMisuse of stolen credentialsSQL FirewallApplicationSQL CommandsDirect userPolicy|XViolation logRegular SQL ProcessingAuthorized SQLUnauthorized SQLExecution contextKey dif

5、ferentiators of SQL FirewallCannot be bypassedBuilt into Oracle Database kernelVisibility into ALL SQL trafficSuperior manageabilityPL/SQL interfacesOracle Data Safe consoleCLIs,RESTful APIsVisibility into run-time execution contextCannot be fooled by synonyms,dynamic SQL,encoded SQLFull visibility

6、into the database objectsHighly performantNegligible performance overheadNo additional latencyOracle CloudWorld Copyright 2024,Oracle and/or its affiliates7Licensing SQL FirewallIncluded as part of Oracle Database VaultIncluded as part of Oracle Audit Vault and Database FirewallOracle CloudWorld Cop