Security For Oracle8i Java Applications

Network Connection Security

There are two major aspects to network security: authentication and data confidentiality. The type of authentication and data confidentiality is dependent on how you connect to the database--through Net8, JDBC, or distributed object (EJB or CORBA) connection.

Connection Security Description

Net8

The database can require both authentication and authorization before allowing a user to connect to the database. Net8 database connection security can require one or more of the following:

Use a username and password for client verification. Each incoming connection into the database has to provide the correct username/password configured within Net8. For more information, see the Net8 Administrator's Guide.

Use Advanced Networking Option for encryption, kerberos, or secureId. See the Oracle Advanced Security Administrator's Guide.

Use SSL for certificate authentication. See the Oracle Advanced Security Administrator's Guide.

JDBC

JDBC connection security required is similar to the constraints required on a Net8 database connection. In addition to the books listed in the Net8 database connection section, see the Oracle8i JDBC Developer's Guide and Reference.

Distributed Object

Encryption and authentication might be required for distributed applications, such as EJB and CORBA. For more information, see the Oracle8i Enterprise JavaBeans Developer's Guide and Reference or the Oracle8i CORBA Developer's Guide and Reference books.