ABSTRACT

Oracle Database Vault (DV) was introduced in Oracle 10gR2 and is also available for 11g and Oracle 9iR2. It is a security off ering primarily targeting the ability to place better controls on privileged users and the ability to manage security from outside the database. It introduces a comprehensive external security overlay that can be managed by non-database administrators (DBAs) and can enforce even DBA activities. It addresses separation of duties for elevating security. As an example, it introduces a new role that is the only one able to create users and modify passwords for users and it prevent the DBA role from doing such activities.