Oracle Information Security Management Architecture helps enterprises achieve "from inside to outside" overall security

The Oracle information security management architecture focuses on Oracle's strategy to help users securely store and access information, including the following three layers:

Ensure security at the application layer. The biggest challenge to application security is access control ". In the early days, separate application systems adopted fragmented security policies, such as too many usernames and passwords, isolated accounts, expired access permissions, lack of overall audits, and unclear responsibilities. In addition, network administrators are often unaware of changes in organizations and roles. Oracle Identity Management solves these problems, it provides multiple functions such as centralized security management and policy management, automatic processing/cancellation, Single login/delegated management, and cross-enterprise joint access. As an integral part of the ORACLE Integrated middleware product series, the Oracle Identity Management System features complete functions, convenience, hot swapping, outstanding features based on open standards and support for heterogeneous environments, it also supports regulatory compliance and privacy protection and reduces management costs.

Ensures the security of web services. The emergence of Service-Oriented Architecture (SOA) Exposes enterprise business logic and data. People can use the firewall to easily access plain text data through HTTP. Therefore, monitoring and auditing the interaction process of web services and implementing consistent security policies for all services across the enterprise is an important means to achieve Web Service Security. As another component of the ORACLE Integrated middleware product series, Oracle Web Services Manager implements Security Policies for web services, such: similar to verifying and authorizing real users and implementing centralized policy management on the local machine. At the same time, it can audit and monitor, such as: record the Web service interaction process, and provide the required information for monitoring through the Status display board. Oracle Web Service Manager is interoperable and supports JAAS, jacc, WS-Security, and other standards as well as. NET and J2EE Web Services. In addition, Oracle SOA suite provides security protection performance.

ensures data security. Sensitive data is particularly protected within an enterprise. However, some users in an enterprise often have too high privileges and insufficient access restrictions; unclear responsibilities between database administrators, security teams, IT departments and developers, and complicated interfaces and heterogeneous system data environments. Oracle data vault establishes data protection zones and enterprise data access rules (such as time and date, IP addresses, and authentication methods) only provides privileged users with information required for normal operations, and provides careful and meticulous data security. Oracle Database Vault is the world's first database security product to restrict privileged user access. On this basis, Oracle also reinforces data protection through Oracle Security Backup (Oracle Secure Backup) and ORACLE Advanced Security accessories.