Oracle Database Attack Surface Reduction Master Class (Sydney Master Class)

Dan Morgan’s Oracle Database Attack Surface Reduction Master Class has been designed for an audience of senior technologists, DBAs and Developers, as well as senior Information Security professionals not put off by technical details and demonstration live in SQL*Plus.

In Scope for this workshop are unpublished exploits, undocumented parameters, and more than 730 configuration changes that can impact the ability of an Oracle Database to survive a sophisticated attack by persons and bots even if they have phished valid credentials. Out of scope for this workshop are options, licenses, and products. The Workshop’s goal is to provide information security professions with the information they need to reduce the attack surface of what they already own.

Oracle Database Attack Surface Reduction Master Class (Perth Master Class)

Dan Morgan’s Oracle Database Attack Surface Reduction Master Class has been designed for an audience of senior technologists, DBAs and Developers, as well as senior Information Security professionals not put off by technical details and demonstration live in SQL*Plus.

In Scope for this workshop are unpublished exploits, undocumented parameters, and more than 730 configuration changes that can impact the ability of an Oracle Database to survive a sophisticated attack by persons and bots even if they have phished valid credentials. Out of scope for this workshop are options, licenses, and products. The Workshop’s goal is to provide information security professions with the information they need to reduce the attack surface of what they already own.

Oracle Database Attack Surface Reduction Master Class (Melbourne Master Class)

Dan Morgan’s Oracle Database Attack Surface Reduction Master Class has been designed for an audience of senior technologists, DBAs and Developers, as well as senior Information Security professionals not put off by technical details and demonstration live in SQL*Plus.

In Scope for this workshop are unpublished exploits, undocumented parameters, and more than 730 configuration changes that can impact the ability of an Oracle Database to survive a sophisticated attack by persons and bots even if they have phished valid credentials. Out of scope for this workshop are options, licenses, and products. The Workshop’s goal is to provide information security professions with the information they need to reduce the attack surface of what they already own.

 

 

On the way to the “Least Privilege Principle” – Privilege Analysis with the Oracle Database by Markus Flechtner

As a DBA you probably know the situation: one of the first SQL commands when installing third-party software is “GRANT DBA TO ..”. Or: the developers in your own development department don’t know which privileges they need in the database – and first demand DBA rights in the development environment.

And then the security officer appears on stage and says “everyone may only get the rights he really needs” – the well-known least privilege principle is required.

But how can this be found out?

Since database version 12c Oracle offers the feature “Privilege Analysis” for this purpose.

Unfortunately, the use of this feature was originally linked to the Database-Vault-License – and therefore not (legally) applicable for most DBAs.

This restriction was lifted in November 2018: all customers with Enterprise Edition are allowed to use the feature.

Reason enough to take a closer look at this functionality in the presentation: how can the DBA determine which rights the applications and users really need and set up a suitable rights concept for them?

Introducing Oracle Zero Downtime Migration 21.3 by Gavin Soorma

Oracle Zero Downtime Migration (ZDM) is Oracle’s premier solution for a simplified and automated migration experience to the Cloud providing zero to negligible downtime for migration of on-premise production workloads to the Oracle Cloud Infrastructure.

ZDM follows Oracle Maximum Availability Architecture (MAA) principles completely and incorporates products such as GoldenGate and Data Guard to ensure High Availability and an online migration workflow which supports both a logical as well as physical model.

Graphing Grifters: Identify & Display Patterns of Corruption With Oracle Graph Studio by Jim Czuprynski

Ever wonder how your bank knows when to text you when a potentially fraudulent transaction appears on its radar?

It’s simple if you know how to apply the right algorithms to financial transactions so that outliers become readily apparent.

These techniques can be applied to just about any anomalous behavior, and property graph technology helps make outliers stand out dramatically.

Through presentations and online demonstrations, this session will:
• Show how to use appropriate ML algorithms already built into Oracle Database to uncover anomalous patterns
• Demonstrate Oracle Graph Studio’s capabilities to identify and display outliers more clearly
• Introduce the basic concepts of PGQL (Property Graph Query Language) to look at tabular data in completely new way

National Webinar Series 2022 – Process Automation functionality within Oracle APEX by Ralf Mueller

The Australian Oracle User Group, AUSOUG, have a focus on bringing together our Oracle community and servicing their core technical, development and applications needs. A balanced program is aimed at all levels of skill and experience within a forum of User led independent knowledge sharing.

 

Process Automation functionality within Oracle APEX by Ralf Mueller

With the release of Oracle APEX 22.1, a journey towards enabling Process Automation functionality within Oracle APEX has started.

The new Approvals Component in Oracle APEX 22.1 offers basic Task Management and streamlines Approvals in APEX apps and Workflows under a new Unified Task List.

In this session we give an overview and demo of the Approvals Component and how it can be used in applications and provide an outlook on future Workflow functionality within Oracle APEX.

National Webinar Series 2022 – Design your Employee Experience with Oracle Journeys by Debra Lilley

The Australian Oracle User Group, AUSOUG, have a focus on bringing together our Oracle community and servicing their core technical, development and applications needs. A balanced program is aimed at all levels of skill and experience within a forum of User led independent knowledge sharing.

Design your Employee Experience with Oracle Journeys by Debra Lilley

Journeys is the evolving functionality which gives your HR teams the power to create great experiences for employees.

How does this HR teams the ability to innovate and deliver a more human-centered experience for users. – how Journeys enables Inoapps (an Oracle-only partner using Oracle Cloud for their internal systems) to provide a tailored learning programme with content varying across the UK and APAC regions as they execute on their aggressive growth strategy.

AUSOUG Connect 2021

AUSOUG Connect 2021 will take place over 4 days from 9th November 2021 to 12th November 2021, virtually and online, with each day dedicated to a stream:

  • Oracle E-Business Suite/Cloud Applications
    Development/APEX Day Series
    EPM & Analytics Summit
    Database/Cloud Day

We will have plenty of in-depth presentations on subjects such as Architecture and Design, ORACLE RDBMS, Analytics, Security, Operations, Scalability, Performance, Cloud, Big Data and other challenging business areas!

We are securing some amazing speakers both from within Australia and from around the globe, who will be presenting a varied and informative set of papers that are broadly split into the four streams above.

Practical training: How to get off the hamster wheel of Oracle Cloud quarterly updates by Peter Earnshaw and Peter Crew

One of the key challenges Oracle Cloud customers have is keeping pace with the quarterly upgrade schedule for Oracle Cloud applications. 

A typical upgrade process involves several routine tasks, such as: 

Reviewing upcoming changes and assessing the potential impact on users and existing processes 

Performing UAT cycles in a sandbox environment, in preparation for the production rollout 

Preparing and disseminating documentation and other self-help materials in case of significant UI or process changes 

Assessing the impact on user productivity of issues introduced by the upgrade, to adequately allocate IT and other resources towards their resolution 

Finally, being able to engage a fast response team to deal with such issue, in orders to minimize their impact on business 

The team tasked with managing this process can be easily overwhelmed, given that these upgrade cycles happen so frequently. 

In this webinar Knoa and our guest presenter, Peter Crew the CTO of Magia Solutions, will discuss some practical tips and tools that can help you effectively prepare for and deal with these upgrades, making your life easier, helping you deliver a better quality of service to your business stakeholders: the actual end users – your employees.