Oracle DV(数据库审计)

Oracle®DatabaseVaultAdministrator’sGuide11gRelease1(11.1)B31222-16February2011OracleDatabaseVaultAdministrator'sGuide11gRelease1(11.1)B31222-16Copyright©2006,2011,Oracleand/oritsaffiliates.Allrightsreserved.PrimaryAuthor:PatriciaHueyContributors:PriyaBadnar,TammyBednar,TomBest,Ji-wonByun,BenChang,MartinCheng,ChiChingChui,ScottGaetjen,ViksitGaur,JanisGreenberg,LijieHeng,SumitJeloka,DominiqueJeunot,TerriKeller,PeterKnaggs,ChonLee,FrankLee,PaulNeedham,DeborahOwens,YiOuyang,HozefaPalitanawala,RobertPang,RupaParameswaran,GayathriSairamkrishnan,VipinSamar,JavedSamuel,JamesSpiller,AshwiniSupur,SrividyaTata,KamalTbeileh,SudheeshVarma,PeterWahl,RodneyWard,DanielWong,AravindYalamanchiThissoftwareandrelateddocumentationareprovidedunderalicenseagreementcontainingrestrictionsonuseanddisclosureandareprotectedbyintellectualpropertylaws.Exceptasexpresslypermittedinyourlicenseagreementorallowedbylaw,youmaynotuse,copy,reproduce,translate,broadcast,modify,license,transmit,distribute,exhibit,perform,publish,ordisplayanypart,inanyform,orbyanymeans.Reverseengineering,disassembly,ordecompilationofthissoftware,unlessrequiredbylawforinteroperability,isprohibited.Theinformationcontainedhereinissubjecttochangewithoutnoticeandisnotwarrantedtobeerror-free.Ifyoufindanyerrors,pleasereportthemtousinwriting.IfthissoftwareorrelateddocumentationisdeliveredtotheU.S.GovernmentoranyonelicensingitonbehalfoftheU.S.Government,thefollowingnoticeisapplicable:U.S.GOVERNMENTRIGHTSPrograms,software,databases,andrelateddocumentationandtechnicaldatadeliveredtoU.S.GovernmentcustomersarecommercialcomputersoftwareorcommercialtechnicaldatapursuanttotheapplicableFederalAcquisitionRegulationandagency-specificsupplementalregulations.Assuch,theuse,duplication,disclosure,modification,andadaptationshallbesubjecttotherestrictionsandlicensetermssetforthintheapplicableGovernmentcontract,and,totheextentapplicablebythetermsoftheGovernmentcontract,theadditionalrightssetforthinFAR52.227-19,CommercialComputerSoftwareLicense(December2007).OracleUSA,Inc.,500OracleParkway,RedwoodCity,CA94065.Thissoftwareisdevelopedforgeneraluseinavarietyofinformationmanagementapplications.Itisnotdevelopedorintendedforuseinanyinherentlydangerousapplications,includingapplicationswhichmaycreateariskofpersonalinjury.Ifyouusethissoftwareindangerousapplications,thenyoushallberesponsibletotakeallappropriatefail-safe,backup,redundancy,andothermeasurestoensurethesafeuseofthissoftware.OracleCorporationanditsaffiliatesdisclaimanyliabilityforanydamagescausedbyuseofthissoftwareindangerousapplications.OracleisaregisteredtrademarkofOracleCorporationand/oritsaffiliates.Othernamesmaybetrademarksoftheirrespectiveowners.Thissoftwareanddocumentationmayprovideaccesstoorinformationoncontent,products,andservicesfromthirdparties.OracleCorporationanditsaffiliatesarenotresponsibleforandexpresslydisclaimallwarrantiesofanykindwithrespecttothird-partycontent,products,andservices.OracleCorporationanditsaffiliateswillnotberesponsibleforanyloss,costs,ordamagesincurredduetoyouraccesstooruseofthird-partycontent,products,orservices.iiiContentsPreface...............................................................................................................................................................xxiAudience.....................................................................................................................................................xxiDocumentationAccessibility...................................................................................................................xxiRelatedDocuments..................................................................................................................................xxiiConventions..............................................................................................................................................xxii1IntroducingOracleDatabaseVaultWhatIsOracleDatabaseVault?............................................................................................................1-1ComponentsofOracleDatabaseVault................................................................................................1-2OracleDatabaseVaultAccessControlComponents....................................................................1-2OracleDatabaseVaultAdministrator(DVA)................................................................................1-3OracleDatabaseVaultConfigurationAssistant(DVCA)............................................................1-3OracleDatabaseVaultDVSYSandDVFSchemas........................................................................1-3OracleDatabaseVaultPL/SQLInterfacesandPackages............................................................1-3OracleDatabaseVaultandOracleLabelSecurityPL/SQLAPIs...............................................1-4OracleDatabaseVaultReportingandMonitoringTools.............................................................1-4HowOracleDatabaseVaultAddressesComplianceRegulations...............