ORACLE ADVANCED SECURITY Oracle Advanced Security helps customers address regulatory compliance requirements by protecting sensitive data on the network, on storage media and within the database from unauthorized disclosure. Transparent Data Encryption, a major component of Oracle Advanced Security, provides the industry’s most advanced database encryption solution for protecting sensitive information without requiring changes to applications.
Overview Oracle Advanced Security is an option to the Oracle Database 11g Enterprise Edition that helps address privacy and regulatory requirements including the Payment Card Industry Data Security Standard (PCI-DSS), Health Insurance Portability and Accountability Act (HIPAA), and numerous breach notification laws. Oracle Advanced Security provides data encryption and strong authentication services to the Oracle database, safeguarding sensitive data against unauthorized access from the network and the operating system. It also protects against theft, loss, and improper decommissioning of storage media and database backups.
Transparent Data Encryption Transparent data encryption (TDE) encrypts data before it is written to storage and automatically decrypts data when reading it from storage without any changes to existing applications – no triggers, views or other costly changes. Access controls that are enforced by the Oracle database, including object grants, roles, virtual private database and Oracle Database Vault, still remain in effect.
TDE supports two modes: tablespace encryption and column encryption. TDE tablespace encryption, introduced with Oracle Database 11g, provides an efficient solution for encrypting entire application tables. TDE tablespace encryption fully supports Exadata X2 including Smart Scan and Hybrid Columnar Compression (EHCC). Starting with Oracle Database 11.2.0.2, TDE tablespace encryption automatically utilizes the hardware acceleration of the Intel ® Xeon ® 5600 CPUs with AES-NI, enabling Oracle Database 11g to encrypt and decrypt data up to 10 times faster on Intel ®platforms, including the Oracle Exadata Database Machine. TDE column encryption, introduced with Oracle Database 10g Release2, provides an efficient solution for encrypting individual data elements such as credit card and social security numbers. For TDE column and tablespace encryption, frequently accessed data blocks are cached in memory in the same manner as traditional nonencrypted data blocks. This efficient use of native database performance optimizations enables TDE to minimize overhead. TDE tablespace and column encryption also can be used in combination within the same database for hybrid encryption solutions
ORACLE ADVANCED SECURITY
ReplyDeleteOracle Advanced Security helps customers address regulatory
compliance requirements by protecting sensitive data on the
network, on storage media and within the database from
unauthorized disclosure. Transparent Data Encryption, a major
component of Oracle Advanced Security, provides the industry’s
most advanced database encryption solution for protecting sensitive
information without requiring changes to applications.
Overview
Oracle Advanced Security is an option to the Oracle Database 11g Enterprise
Edition that helps address privacy and regulatory requirements including the
Payment Card Industry Data Security Standard (PCI-DSS), Health Insurance
Portability and Accountability Act (HIPAA), and numerous breach notification
laws. Oracle Advanced Security provides data encryption and strong authentication
services to the Oracle database, safeguarding sensitive data against unauthorized
access from the network and the operating system. It also protects against theft,
loss, and improper decommissioning of storage media and database backups.
Transparent Data Encryption
Transparent data encryption (TDE) encrypts data before it is written to storage and
automatically decrypts data when reading it from storage without any changes to
existing applications – no triggers, views or other costly changes. Access controls
that are enforced by the Oracle database, including object grants, roles, virtual
private database and Oracle Database Vault, still remain in effect.
TDE supports two modes: tablespace encryption and column encryption. TDE
tablespace encryption, introduced with Oracle Database 11g, provides an efficient
solution for encrypting entire application tables. TDE tablespace encryption fully
supports Exadata X2 including Smart Scan and Hybrid Columnar Compression
(EHCC). Starting with Oracle Database 11.2.0.2, TDE tablespace encryption
automatically utilizes the hardware acceleration of the Intel ® Xeon ® 5600 CPUs
with AES-NI, enabling Oracle Database 11g to encrypt and decrypt data up to 10
times faster on Intel ®platforms, including the Oracle Exadata Database Machine.
TDE column encryption, introduced with Oracle Database 10g Release2, provides
an efficient solution for encrypting individual data elements such as credit card and
social security numbers. For TDE column and tablespace encryption, frequently
accessed data blocks are cached in memory in the same manner as traditional
nonencrypted data blocks. This efficient use of native database performance
optimizations enables TDE to minimize overhead. TDE tablespace and column
encryption also can be used in combination within the same database for hybrid
encryption solutions