The course works on the principle that "if you have done it you will understand it". Therefore do expect this course to involve you a great deal in discussions, workshops and especially examination of the system hands on. By the end of the course you will be familiar with Oracle's client interface, the SQL*PLUS monitor and with simple SQL queries. In particular, you will come to understand the technical language surrounding Oracle and will gain immediate credibility talking to the experts you will inevitably have to work with. Furthermore, by understanding the technology, the descriptions of risk will become immediately understood.
This hands-on course is intended for auditors and security specialists who are aware their businesses use Oracle based products, but do not understand the database platform and therefore the risks it may carry. You will learn how Oracle is built and a concept of what the various categories of user do on the database and the risks they carry.
Hands on labs will show you how to scan the system for objects, especially sensitive tables. And to find out who can do what to them. Further more, in this age of web technology, the concept of the authenticated user accessing parts of your data is passing away. It could be anyone!
Covers Oracle 9i, 10g and 11g.
Before coming on the course, delegates should feel confident inputting instructions on a command line and accessing files on a filing system. Some exposure to a database environment is useful.