Oracle EBS APPS, SYSADMIN, and oracle - Privileged Generic ...

[Pages:48]Oracle E-Business Suite

APPS, SYSADMIN, and oracle Securing Generic Privileged Accounts

May 15, 2014

Mike Miller Chief Security Officer Integrigy Corporation

Stephen Kost Chief Technology Officer Integrigy Corporation

Phil Reimann Director of Business Development Integrigy Corporation

Agenda

Overview

Best Practices

Q&A

12345

EBS Privileged Accounts

Logging Auditing & Monitoring

About Integrigy

ERP Applications

Oracle E-Business Suite

Databases

Oracle, SQL Server, MySQL

Products

AppSentry

ERP Application and Database Security Auditing Tool

AppDefend

Enterprise Application Firewall for the Oracle E-Business Suite

Validates Security

Protects Oracle EBS

Verify Security

Ensure Compliance

Build Security

Services

Security Assessments

Oracle EBS, OBIEE, Databases, Sensitive Data, Penetration Testing

Compliance Assistance

SOX, PCI, HIPAA

Security Design Services

Auditing, Encryption, DMZ

You

Agenda

Overview

Best Practices

Q&A

12345

EBS Privileged Accounts

Logging Auditing & Monitoring

{ generic privileged account }

application, database, or operating system account

used for administration by multiple people and has significant privileges

Generic Privileged Accounts

Oracle E-Business Suite is defined by generic privileged accounts in each layer of the technology stack

- Multiple highly privileged accounts - Generic accounts that must be used to manage the

application and database

Majority of all data breaches committed by insiders

- Some intentional - Most accidental

Oracle EBS Generic Privileged Accounts

Oracle E-Business Suite

Oracle Database

Operating System

(Unix and Linux)

SYSADMIN

seeded application accounts

APPS, APPLSYS SYS, SYSTEM

Oracle EBS schemas (GL, AP, ...)

root oracle, applmgr

Generic Privileged Account Inter-Dependency

database

APPS

execute SQL as SYS

database

SYS

can obtain SYSADMIN password

execute SQL as APPS

connect as SYSDBA

execute OS commands

as oracle

application

SYSADMIN

operating system

oracle/ applmgr

 ................
................

In order to avoid copyright disputes, this page is only a partial summary.

Google Online Preview   Download