Catalogs >
Oracle >
advanced-security

advanced-security
2Pages

Catalog excerpts

ORACLE DATA SHEET ORACLE ADVANCED SECURITY KEY FEATURES AND BENEFITS Transparently encrypt data without application changes Built-in key management Encrypt entire application tables or individual columns Oracle Advanced Security helps customers address regulatory compliance requirements by protecting sensitive data on the network, on storage media and within the database from unauthorized disclosure. Transparent Data Encryption, a major Encrypt database exports and RMAN backups component of Oracle Advanced Security, provides the industry’s Encrypt Oracle SQL*Net network traffic most advanced database encryption solution for protecting sensitive Fully interoperable with Oracle Advanced Compression technologies Fully Interoperable with Oracle GoldenGate 11.1.1.1 information without requiring changes to applications. Overview Oracle Advanced Security is an option to the Oracle Database 11g Enterprise Exadata X2 ‘Smart Scan’ and EHCC support Edition that helps address privacy and regulatory requirements including the Integration with hardware security modules (HSM) for centralized, high assurance, key management Portability and Accountability Act (HIPAA), and numerous breach notification Cryptographic acceleration with AES-NI on Intel® XEON® 5600 access from the network and the operating system. It also protects against theft, Industry standards – AES, 3DES, PKCS#11, PKCS#12, X.509v3 Payment Card Industry Data Security Standard (PCI-DSS), Health Insurance laws. Oracle Advanced Security provides data encryption and strong authentication services to the Oracle database, safeguarding sensitive data against unauthorized loss, and improper decommissioning of storage media and database backups. Transparent Data Encryption Transparent data encryption (TDE) encrypts data before it is written to storage and automatically decrypts data when reading it from storage without any changes to existing applications – no triggers, views or other costly changes. Access controls that are enforced by the Oracle database, including object grants, roles, virtual private database and Oracle Database Vault, still remain in effect. TDE supports two modes: tablespace encryption and column encryption. TDE tablespace encryption, introduced with Oracle Database 11g, provides an efficient solution for encrypting entire application tables. TDE tablespace encryption fully supports Exadata X2 including Smart Scan and Hybrid Columnar Compression (EHCC). Starting with Oracle Database 11.2.0.2, TDE tablespace encryption automatically utilizes the hardware acceleration of the Intel® Xeon® 5600 CPUs with AES-NI, enabling Oracle Database 11g to encrypt and decrypt data up to 10 times faster on Intel® platforms, including the Oracle Exadata Database Machine. TDE column encryption, introduced with Oracle Database 10g Release2, provides an efficient solution for encrypting individual data elements such as credit card and 1

Open the catalog to page 1

ORACLE DATA SHEET RELATED PRODUCTS social security numbers. For TDE column and tablespace encryption, frequently accessed data blocks are cached in memory in the same manner as traditional non- Oracle Database Vault encrypted data blocks. This efficient use of native database performance Oracle Database Firewall optimizations enables TDE to minimize overhead. TDE tablespace and column Oracle Audit Vault encryption also can be used in combination within the same database for hybrid Oracle Label Security encryption solutions. Oracle Data Masking Key Management Oracle Advanced Security...

Open the catalog to page 2