Using The Collector And Reporter

Collector and Reporter Architecture

The Collector and Reporter components generate security assessment reports for Oracle databases. The Collector queries the database for data, which the Reporter then analyses and uses to make security recommendations.

Running The Collector

The Collector requires a running database and listener. It can be run using the dbsat collect command with various options, including specifying the database connection string and output file. It's recommended to use secure authentication methods, such as SEPS authentication, to avoid entering passwords on the command line.

Running The Reporter

The Reporter requires Oracle Java Runtime Environment (Oracle JRE) 17 or later. It can be invoked with the dbsat report command, which takes various options to specify the input file, output format, and other parameters. The Reporter analyses the data collected by the Collector and generates reports in HTML, Excel, JSON, and Text formats.

Oracle Database Security Assessment Report

The Oracle Database Security Assessment Report provides a comprehensive analysis of database security, including user accounts, privileges, auditing, encryption, authorization control, and more. It offers recommendations to improve security and is available in different formats for easy navigation and analysis.

Oracle Database Security Assessment Report- Summary

The Summary section provides an overview of the assessment, including the assessment and report generation dates, database details, and a summary of findings.

Oracle Database Security Assessment Report - User Accounts

This section details user accounts, including their profiles, authentication types, and other attributes. It highlights findings related to default passwords, expired passwords, inactive users, sample schemas, and more.

Oracle Database Security Assessment Report - Privileges and Roles

The Privileges and Roles section covers administrative privileges, roles, and system privileges granted to users. It identifies powerful roles, system privileges granted to PUBLIC, and other potential security concerns.

Oracle Database Security Assessment Report - Auditing

The Auditing section focuses on audit trails, unified audit policies, and fine-grained audit. It checks if administrative actions, database connections, and other activities are audited.

Oracle Database Security Assessment Report - Encryption

This section covers Transparent Data Encryption, encryption key wallets, and FIPS mode for TDE and DBMS_CRYPTO. It provides information on whether encryption is in use and the status of encryption keys.

Oracle Database Security Assessment Report - Authorization Control

The Authorization Control section discusses Oracle Database Vault, privilege analysis, and data masking. It checks if Database Vault is enabled, and if privilege analysis and data masking are properly configured.

Oracle Database Security Assessment Report - Fine-Grained Access Control

This section covers data redaction, Virtual Private Database, Real Application Security, and Label Security. It provides information on the status of these fine-grained access control mechanisms.

Oracle Database Security Assessment Report - Database Configuration

The Database Configuration section covers initialization parameters, pre-authenticated request URLs, authentication configuration, and other database settings. It checks for best practices and potential security concerns.

Oracle Database Security Assessment Report - Network Configuration

The Network Configuration section focuses on network encryption, client nodes, connection limits, and listener configuration. It provides information on network security settings and potential vulnerabilities.

Oracle Database Security Assessment Report - Operating System

The Operating System section covers installation accounts, OS authentication, segregation of production and development databases, and process ownership. It checks for potential security issues related to the operating system.

Oracle Database Security Assessment Report - Diagnostics

The Diagnostics section provides information on checks that could not be executed. It offers a summary of potential issues and recommendations for further analysis.
Read More: Oracle Database Security Assessment Report - Diagnostics