Oracle Database Security Assessment Tool Components

The DBSAT consists of the following components:

• Collector:

  The Collector executes SQL queries and runs operating system commands to collect data from the system to be assessed. It does this primarily by querying database dictionary views. The collected data is written to a JSON file that is used by the DBSAT Reporter in the analysis phase. Note that if the collector is executed remotely, it will not collect operating system data. It is recommended to run it in the database server to collect all relevant data.

• Reporter:

  The Reporter analyzes the collected data and generates the Oracle Database Security Assessment Report in HTML, Excel, JSON, and Text formats. The Reporter can run on any machine: PC, laptop, or server. You are not limited to running the Reporter on the database server or the same machine as the Collector.

• Discoverer:

  The Discoverer executes SQL queries and collects metadata from the database to be assessed, based on the settings specified in the configuration files. It does this primarily by querying database dictionary views. The collected data is then used to generate the Oracle Database Sensitive Data Assessment Report in HTML, CSV, and JSON formats. The Discoverer can run on any machine: PC, laptop, or server. You are not limited to running the Discoverer on the database server or the same machine as the Collector or Reporter.

The following figure shows the components, sources, and reports of the Oracle Database Security Assessment Tool.

Description of the illustration DBSAT Components

DBSAT, by default, generates encrypted output files. To decrypt the files, you will need to use the dbsat extract command.

For more information about the Collector, Reporter, and Discoverer, see Using the Collector and Reporter.