Slovak University of Technology, Bratislava
Faculty of Informatics and Information Technologies
Degree Course: INFORMATICS
Author: Bc. Vladimír Pavlišin
Diploma thesis: Oracle database system and its security
Supervisor: RNDr. Marcel Zanechal, PhD.
2004, May

The goal of this thesis is a creation of software system capable of Oracle database system configuration security audition. Project consists of brief preview of Oracle9i security mechanisms, analysis of auditing possibilities of Oracle security characteristics and installation configuration and a description of a small security audition tool for Oracle.

Thesis consists of known attacks against Oracle, database security vulnerabilities and the means of protection. The password storage mechanism and encryption possibilities are presented in more detailed way.

In the part of description of solution the thesis comprises the documentation of application development. Documentation is divided into product specification, problem analysis, design of developed system and description of implementation and problems which have arisen while working on the project.

In the conclusion a short functionality review of developed program Oracle System Security Analyser and evaluation of work results are presented.