Categories
Authors
Linux Resources
Site Map
|
|
O.S. : Win95,Win98,WinME,WinNT 3.x,WinNT 4.x,WinXP,Windows2000
License: Commercial $500
Min Requirements : Any Windows System with Oracle Client Limitations :
Filesize: 2.23 MB
Screen Shot : Click Here
Program Website : Network Intelligence India Pvt. Ltd.
|
| |
AuditPro checks for the following:
>General Database Parameters
>SGA Parameters
>Initialization Parameters
>Database Users and their Profiles
>Database Password Parameters
>User Resource Limits
>Active DBA Connections
>Roles not requiring a password
>Roles having the With Admin Option
>Privileges granted directly to Users
>Privileges granted to PUBLIC
>Privileges having the With Admin Option
>Table and Column Privileges with the With Grant Option
>Permissions on table SYS.LINK$
>Permissions on table SYS.AUD$
>Tables with the SYS or SYSTEM Table Space
>Users with DEFAULT passwords
EXTERNAL Users
>Users with CONNECT Privileges
>Users with ALTER SYSTEM Privilege
>Users with CREATE LIBRARY Privilege
>Users with DBA Roles
>Users with RESOURCE Role
>Uses having default Table Space of SYS or SYSTEM
In addition, AuditPro for Oracle also performs a baseline of the database. In this baseline it stores the information about the new Users, Tables, Roles and Privileges since the last baseline. This helps you to identify any new Users, Tables, Roles or Privileges that might have been added to the database since the last time the software was run. The main aim of this baseline is to bring to the DBA's notice any suspicious changes that might have been made to critical values within the database. Each time the Baseline check is run, a new Baseline is created and stored in an encrypted format. The next time the Baseline is run, AuditPro compares current system configurations with the last one and reports any changes.
There also exists the option of a password audit using both Dictionary attack and Brute Forcing. This will check the passwords using the hashes present in the database.
Benefits of using of AuditPro for Oracle:
1. The manual audit of an Oracle server can take a good auditor more than a day, including the analysis of the data and preparation of the report. Even so, he might skip a few checks.
2.
|
|
|
