Contents

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

1 Introduction to Database Auditing

• 1.1 Security Challenges
  • 1.1.1 Insider Threats
  • 1.1.2 Identity Theft
  • 1.1.3 Corporate Governance and Compliance
• 1.2 Need for Database Auditing
• 1.3 Overview of Oracle Audit Vault
• 1.4 Using Oracle Audit Vault Dashboard
• 1.5 Viewing Collectors and Agents
  • 1.5.1 Collectors Page
  • 1.5.2 Agents Page

2 Configuring Audit Policies

• 2.1 Configuring Audit Settings
  • 2.1.1 Viewing and Defining Audit Settings
    • 2.1.1.1 Audit Settings Page
    • 2.1.1.2 Search And Select: Audit Source Page
  • 2.1.2 Overview Page
  • 2.1.3 Defining a Statement Auditing Policy
    • 2.1.3.1 Statement Page
    • 2.1.3.2 Create Statement Audit Page
  • 2.1.4 Creating an Object Auditing Policy
    • 2.1.4.1 Object Page
    • 2.1.4.2 Create Object Audit Page
  • 2.1.5 Defining a Privilege Auditing Policy
    • 2.1.5.1 Privilege Page
    • 2.1.5.2 Create Privilege Audit Page
  • 2.1.6 Creating a Fine-Grained Auditing (FGA) Policy
    • 2.1.6.1 FGA Page
    • 2.1.6.2 Create FGA Page
    • 2.1.6.3 Fine-Grained Audit Detail Page
  • 2.1.7 Creating a Capture Rule
    • 2.1.7.1 Capture Rule Page
    • 2.1.7.2 Create Capture Rule Page
• 2.2 Configuring Alerts
  • 2.2.1 Creating an Alert
  • 2.2.2 Audit Alerts Page
  • 2.2.3 Alerts Page
  • 2.2.4 Create Alert Rule Page
    • 2.2.4.1 Basic Alert Condition
    • 2.2.4.2 Advanced Alert Condition

3 Oracle Audit Vault Reports

• 3.1 Activity Reports
  • 3.1.1 Activity Reports Page
  • 3.1.2 Activity Overview Report
    • 3.1.2.1 Report Fields and Filter Criteria on the Activity Overview Report Page
    • 3.1.2.2 Activity Overview Actions
  • 3.1.3 Common Features of Audit Event Activity Pages
    • 3.1.3.1 Report Fields and Filter Criteria on Audit Event Activity Report Pages
    • 3.1.3.2 Other Actions to Perform in Audit Event Activity Pages
    • 3.1.3.3 Detail Report
  • 3.1.4 Activity Reports
    • 3.1.4.1 Account Management Activity
    • 3.1.4.2 Application Management Activity
    • 3.1.4.3 Audit Command Activity
    • 3.1.4.4 Data Access Activity
    • 3.1.4.5 Exception Activity
    • 3.1.4.6 Invalid Audit Record Activity
    • 3.1.4.7 Object Management Activity
    • 3.1.4.8 Peer Association Activity
    • 3.1.4.9 Role and Privilege Management Activity
    • 3.1.4.10 Service and Application Access Activity
    • 3.1.4.11 System Management Activity
    • 3.1.4.12 Uncategorized Activity
    • 3.1.4.13 User Session Activity
  • 3.1.5 Creating Customized Reports
• 3.2 Alert Reports
  • 3.2.1 Alert Report Page
    • 3.2.1.1 Report Fields and Filter Criteria on the Alert Page
    • 3.2.1.2 Actions to Perform on the Alert Report Page
• 3.3 Data Warehouse

A Data Warehouse Schema Reference

• A.1 Oracle Audit Vault Audit Data Warehouse Architecture
• A.2 Design of the Audit Data Warehouse
• A.3 Fact Table and Dimension Tables
• A.4 Fact Table Constraints and Indexes
• A.5 Table Details
  • A.5.1 AUDIT_EVENT_FACT Table
  • A.5.2 CLIENT_HOST_DIM Table
  • A.5.3 CONTEXT_DIM Table
  • A.5.4 EVENT_DIM Table
  • A.5.5 PRIVILEGES_DIM Table
  • A.5.6 SOURCE_DIM Table
  • A.5.7 TARGET_DIM Table
  • A.5.8 TIME_DIM Table
  • A.5.9 USER_DIM Table

B Oracle Database Audit Events

• B.1 Attributes by Event Category
  • B.1.1 Account Management Event Attributes
  • B.1.2 Application Management Event Attributes
  • B.1.3 Audit Command Event Attributes
  • B.1.4 Data Access Event Attributes
  • B.1.5 Exceptional Event Attributes
  • B.1.6 Invalid Record Event Attributes
  • B.1.7 Object Management Event Attributes
  • B.1.8 Peer Association Event Attributes
  • B.1.9 Role and Privilege Management Event Attributes
  • B.1.10 Service and Application Utilization Event Attributes
  • B.1.11 System Management Event Attributes
  • B.1.12 Unknown or Uncategorized Event Attributes
  • B.1.13 User Session Event Attributes
• B.2 Source Event IDs
  • B.2.1 Account Management Events
  • B.2.2 Application Management Events
  • B.2.3 Audit Events
  • B.2.4 Data Access Events
  • B.2.5 Exceptional Events
  • B.2.6 Invalid Record Events
  • B.2.7 Object Management Events
  • B.2.8 Peer Association Events
  • B.2.9 Role and Privilege Management Events
  • B.2.10 Service and Application Utilization Events
  • B.2.11 System Management Events
  • B.2.12 Unknown or Uncategorized Events
  • B.2.13 User Session Events

Index