Database Autopsy Close Look to Database Auditing for Oracle Database

12 Pages·2013·0.52 MB·English

by  Elham Iskandarnia

Global Journal of Computer Science and Technology
Software & Data Engineering
Volume 13 Issue 6 Version 1.0 Year 2013
Type: Double Blind Peer Reviewed International Research Journal
Publisher: Global Journals Inc. (USA)
Online ISSN: 0975-4172 & Print ISSN: 0975-4350

Database Autopsy Close Look to Database Auditing for Oracle
Database
By Elham Iskandarnia
AMA International u,niversity,,Bahrain
Abstract - Today, that business has different rules and regulation and supplied threats; organizations
must go well beyond securing their data, and managing their database. Essentially, Data have to be
perpetually monitored to be aware of who what, to all their data. Database auditing involves
monitoring database to be aware of what user of proceedings. In this article we will offer a novel
procedure for finding auditing records from different locations that DBMS keeps records, further more
we will discuss which user, or system activity to keep records to do auditing efficiently and also avoid
over use of system resources which will caused on slow transaction time.
GJCST-C Classification : H.2.m

Database Autopsy Close Look to Database Auditing for Oracle Database

Strictly as per the compliance and regulations of:

© 2013. Elham Iskandarnia. This is a research/review paper, distributed under the terms of the Creative Commons Attribution-
Noncommercial 3.0 Unported License http://creativecommons.org/licenses/by-nc/3.0/), permitting all non-commercial use, distribution,
and reproduction inany medium, provided the original work is properly cited.
Database Autopsy Close Look to Database
Auditing for Oracle Database
Elham Iskandarnia
Abstract - Today, that business has different rules and Threats to database results in the loss or
regulation and supplied threats; organizations must go well degradation of some or all of following commonly
beyond securing their data, and managing their database. accepted security Goals: integrity, availability, and 13
Essentially, Data have to be perpetually monitored to be aware 0
confidentiality. 2
of who what, to all their data. Database auditing involves Grate amount of different errors can leak into ar
monitoring database to be aware of what user of proceedings. Ye
organizational databases; these errors may range from
In this article we will offer a novel procedure for finding auditing data entry errors to violations of accounting standards. It
records from different locations that DBMS keeps records, 1

further more we will discuss which user, or system activity to seems that although database systems have radically
keep records to do auditing efficiently and also avoid over use changed the file system in terms speed and
I
of system resources which will caused on slow transaction competence, detecting errors and keeping quality did n
o
time. not cope with speed of events. si
r
e
To protect database against types of threats, it V
The Problem and Its Background
is common to implement four kind of control VI
I. Introduction measurement. e
u
Today, that business has differ ent rules and • Access control Iss
regulation and supplied threats, organizations • Authentication XIII
• Authorization
must go well Beyond securing their data, and e
• Auditing m
managing their database. Essentially, Data have to be u
perpetually monitored to be aware of who what, to all Database auditing is directly related to Vol
dthaetiar badsaet at.o Dbae taabwaasree oafu dwithinagt uisnevro lovef sp romcoeneditoinrginsg. dseactaubriatys.e Isne cpurraitcyt.i cAeu, diift intgh eisre onise ansepeedc t too f sdeactaubrea sea ( )C DDDDDDDD
Database consultant and DBA often set up auditing particular database system, then auditing is essential. y
g
policy forsecurity purposes, for example, to ensure that Auditing mechanism implemented on a database o
everybody get access to what it has permission . This system facilitates the security implemented in a system. nol
h
study looks at auditing as a concept, what are threats Three different strategies for database auditing ec
and how to diagnose that threat when they are are introduced and compare in term of efficiently (Data T
happening. Base Auditing, Levant V. Orman, and Cornell University). and

On e of challenge regarding auditing that In this paper we will discuss Data base Autopsy, e
c
Organizations today are facing is data security, they that is when a threat happened you use tools to find out en
have to recog nize threats and threat them in a more what was type of threat, who attack your data base, Sci

cost effective way. There are some policies which are when that happened. And from this information you can er
t
force by platform the DBA must understand the cost of review and change your Authentication, authorization pu
this policy of database performance and base of need policies. om
C
modify or unable these predefine policies as well as Regulatory compliance requirements can be
create new policies base of their needs. met for your data base by carrying out auditing which of
By understanding the audit con cept companies enforces internal controls, so that unwanted changes nal
can decrease the increasing cost of database security. can be prevented. our
J
a) Back Ground of Study b) Statement of Problem al
b
Database security is a very broad area that i. General Objective Glo
addresses many issues li ke legal and ethical, policy
The outcomes of database auditing can be
issues at g overnmental, orcorporate and system-related
used by administrator to watch the activities of
issues such as system leve l.
Information System Users (ISU). System user can be

aware of database and its capabilities(sophistic user) or

they can be completely unaware of facilities offered by

database (naïve user) .The information that they can

access is defined as constrained by the explicit
Author :AM A International university-Kingdom o f Bahrain School Year
2012-2013.E-mail : [email protected] privileges which is defined by the Database
©2013 Global Journals Inc. (US)
Database Autopsy Close Look to Database Auditing for Oracle Database
Management System (DBMS), or any other tier in multi Auditing, which means capturing and storing
tier architecture like Application Servers (AS) or in any information about what is happening in the system,
another tier. However if a naughty user (inside increase the amount of work the system must do.
organization) or a malicious user (from outside) Auditing must be focused so that only events
attempts to access a piece of information for whom he that are of interest are captured .Properly focused
has no privileges, an audit trial must be made. And his auditing has minimal impact on system performance
activity must be trace and record. .Improperly focused auditing can significantly affect
performance.
ii. Specific Objective
The security administration will use guides

1. What are different types of threats in Database provided by Database auditing to develop and enforce a

3 Management system? well defined set of security policies based on the initial
1
0 2. What is the importance of database auditing? set of business rules. At the beginning of the specific
2
3. What in formations must be kept in database information system project’ the DBA will decide the
ar
e auditing report? business rules and later on, modify it with the passage
Y
4. What are locations yo u can find auditi ng reco rds? of time, based on the behavior of users.
2 5. What are the effects of big auditing file on system A wide range of events that can be tracked and

performance? collected in Auditing of database records. This creates

I an additional processing and disk I/O load on database
n
o c) The Scope and Delimitation server machine and hence degrades its performance. In
rsi The Information system which are manipulating
e other word auditing, which means capturing and storing
V and storing financial, accounting, or other legally
information about what is happening in the system,
VI sensitive data can use this study. Legal vulnerabilities
increase the amount of work the system must do.
ue can be crea ted by even basic trading op e ration, intoday Auditing must be focused so that only events that are of
s
Is increasinglylitigious world. For example. interest are captured Properly focused auditing has
XIII The investor who lose large amount in trading minimal impact on system performance .but with
may hope to recover his capital, and/or the investor’s
e gathering extra and not needed auditing record you will
m employee may seek to escape responsibility, by legal
u scarified the performance of database.
ol action against the broker. If related trade data has been
V modified by the broker without an acceptable Autopsy, So we divide the auditing to
)
C DDDDDDDD which can be seen as apparent indicator from the • Mandatory Auditing: All oracle database audit
(y investor’s opposing res ults which are due to the certain action regardless of other audit option or
g misconduct of the broker. parameter .The reason for mandatory audit logs is
o
ol Auditing, which means capturing and storing that the database needs to record some database
n
ech informati on about what is happening in the system, activities, such as connection by privileged users.
T increase the amount of work the system must do. • Standard Database Auditing: Enabled at the
d
an Auditing must be focused so that only events th at are of system level by using the audit trail initialization
e inter est are captured .Well designed auditing policies parameter. After you enabled auditing select the
c
en has minimal impact o n system performance .Imprope rly object and privileges that you want to audit and set
Sci focused auditing cansignificantly affect performance. auditing properties with audit command.

r The scope and depth of the audit should be
ute designed to meet the specific objective of organizations • Value base Auditing: Extends standards database
p auditing, capturing not only the audited event that
m base of its environments and type of threats it is facing.
o occurred but also the actual values that were
C The coverage of this study is the Oracle
nal of dpaertaiobda sise s1p1egc,i fiewdit hboyu t DSBAA M H, o wwheivcehr , dwaeta wrilel ndoivsactuiosns iins simerpteledm, uepntdeadt ethdr oour gdhe dleatetadb, aVsael utreigsg bear.s e auditing
ur FGA au diting in this paper, but will not consider RAID • Fine-Grained: Auditing(FGA) Extends standard
Jo system. database auditing, capturing the actual SQL

bal The researc her is limited this research to user of statement that was issued rather than only the fact
Glo relational database. that the event occurred.
• SYSDBA Auditing: separates the auditing duties
d) Importance & Significance of Study
between the DBA and an auditor or security
Database auditing and database security are
administrator who monitors the DBA activates in an
directly related to each other. One aspect of database
operating system audit trail.
security is auditing. Auditing is essential tasks for DBA of

database management system which need to secure a So, it is not recommended to keep the
particular database system, then. Auditing mechanism excessive auditing of so as to avoid demeaning of
which is deploying on a database system facilitates the performance of the database server. For example, in
security implemented in a system. case of auditing DML commands, it is recommended to
©2013 Global Journals Inc. (US)
Database Autopsy Close Look to Database Auditing for Oracle Database
keep insert, update and delete statements are recorded model, is extended to more wider concerns of
in audit logs, not all retrieval statements. application development in Deductive computing which
Following statics may show the important of is an example of an emerging paradigm[2].
security and auditing in data base (Neon Enterprise In study published in ACM p r oposed an
Software). approach for detecting differe nt type of anomalies and
• Percentage of companies suffers from increasing of anomalous access patterns in DBMS. They have
developed three models, of different granularity, to
security budget? 54%
represent the SQL queries appearing in the database
• Number of companies that claim their job will get
log files. We will use their work to find out what
more strategic in 2013?69%
information must be extract from log file to show access
• Number of companies that claim their job will get
patterns of the queries[8]. 3
more compliance?75% 1
0
• Number of companies claim that their top priority a) Conceptual Frame Work 2
will be related to network/security integration? 52% We fist will discuss the tolls you can use for ear
• Hbeoswt smeacnuyri tcyo tmhepya cnaiens wwitilhl bthee mir obrued ijnetcetr?e 8st0e%d t o buy afourd ditiinffger,e tnhte nlo wcaet iwonill dloaotak binassied es ttohree ss yasutedmiti nagn dre sceoarrdcsh, Y3
• Sensitive data is losing important data? 68% then we will consider what is actions that DBMS
produces and audit records about it and how we can
This study can be used by add actions to keep data about according to our needs n I
o
i. All organization using database, especially oracle and requirements. si
r
e
database. V
ii. Researchers, who are interested about DBMS and VI
Identify different tools DBA can
its features. e
u
iii. Database Professionals: Data base administrators, use for Auditing purpose ss
I
database sysmans who are responsible for XIII
database recoveries.

iv. Teachers and students how are working with me
u
database in different aspect. ol
V

II. Related Studies Discus available tools in Oracle ( )C DDDDDDDD
A database is considered as a core asset of an 11G with grade y
g
organization. Numerous approaches dealing with Data o
ol
base Auditing Interface for operating systems and n
h
networks have been developed .Nevertheless, they are ec
T
not sufficient for protecting databases. Still there are
many discussions about the abstract and high-l evel nd
a
architecture of a DBMS including an ID component. e
Analyze the tools and extract nc
However, this work mainly focuses on debating e
information about the threat ci
generic solutions rather than proposing solidalgorithmic S
solutions. There are many researches about auditing in er
ut
work done by LIU the authors compare strategies p
m
adapted by selected set of vendor for auditing Co
idnatrtoadbuacseeIn. t hsrteued ym daojonre s tbrayt eCgoiernse ollf Udnaitvaebrassitey athued iatinugth otor Compare extracted nal of
maintain integrity [1]. Then these strategies are ur
information from different Jo
compared in term of efficiency and effectiveness in
tools al
eliminating error, to do so they compute the optimum b
timing under each st rategy. Glo

In studies submitted to IEEE conference they Figure1: Conceptual Framework
demonstrate a way in which deductive database cart be
used to address elusive problems in the establishment

and maintenance of a database audit trail. However,

they discus situation and examples of issues that arise

in many application computing environments. The

means deductive approach can be applied to more than

database issues. The main features of the relational
©2013 Global Journals Inc. (US)
Database Autopsy Close Look to Database Auditing for Oracle Database
c) Research Plan
Research Methodology
A database Administrator knows that when a
III. Specific Research Purpose and threat is happened the first priority is backing up and
restores the system, but it is also very important to find
Research Questions
what the reason for system failure was. To answer this
The purpose of this study is to help database question ,priors to any failure ,you have to analyze your
Administration to identify threats and configure the system as database Administrator and decide what are
database to response by predefine procedure to that the possible threat for your system, and active or
treads, also it will help oracle DBA to identify the harm inactive default auditing records ,or modify and extra
the tread willmake to system performance or security of information to your audit tables.
3 data. All DBA know that finding the proper records for
01 The study will address following questions on your query are one of skills that they will gain it by time
2
r specific: and trying, so in this article we will help database
ea administrator to find required information about threat
Y • What are the kinds of threats that can affect
database performance? effectively and sufficiently.
4 • What are different threa ts that will attack database Also we will talk about how and when you will
purge your unwanted information from Audit table and
security?
I export them for future used.
n • Which location database will store data’s about
o
rsi threats? Results and Discussions
e
V • How to setup database management system to do
VI predefine actions against each threat? IV. Location of Audit Records
ue • What are important information rega rding threats. Oracle 1 1 record audit records in two locations
s
XIII Is • HWohwic hto s etaxtteramcet nintf ocarmn actrieoant efr oamud sity lsotgem? log? •• ODaptearbaatisneg -system Files
• How can you add or edit default commends that
me Oracle decided where to keep record by
make audit logs?
olu investigating value of initialization parameter audit trail.
V
a) Research Methodology The default is DB, as in “AUDIT_TRAIL=DB, you can
)C DDDDDDDD Meta Analysis R esearch methodology is change this value to DB, EXTENDED to rec ord audit

( adopted in accomplishing my research goal. The records in the database together with bind variables

y
g research intends to study the commonly used auditing (SQLBIND) and the SQL.
o
nol method and its drawbacks, also the additional factor Statement triggering the audit entry (SQLTEXT).
h which solves the problems in widely used methodology. AUDIT_TRAIL=OS tells the database to record audit
c
Te The research analyzed various auditing records and records in operating-system files.

d suggested anefficient procedure to abstract information To change value for audi t _trail you have to edit
n
a more effectively and efficiently from recourses. Future your pileor file. For example, the following statement will
e
nc more, a novel model that avoids extra lose of system change t he location of audit records in the spilled.
e
ci resources is proposed.
S

ter b) Research Design
u
mp i. Source of Data
Co Database audit records for statement, privilege,
of and object auditing are stored in the table SYS.AUD$.
al Depending on how extensive you’re auditing and
rn retention policies are, you will need to periodically delete
u
o old audit records from this table. The database does not
J

al provide an interface to assist in deleting rows from the
b
Glo audit table, so you will need to do so yourself.
So we will take a close look at SYS. Audis table
and also very important parameter which is audit _trail.
We will look at four level of auditing which
oracle 11 G do auditing.

• Statement

• Privilege

• Object

• Fine-grained access
©2013 Global Journals Inc. (US)
Database Autopsy Close Look to Database Auditing for Oracle Database

3
1
0
2
r
a
e
Figure 2:Set Audit Scope Y
The audit_ trail parameter can also have values operating-system audit records are written into files in
5

XML and XML, EXTENDED. With these two options, the directory specified by the initialization parameter
audit records are written to OS files in XML format. The audit_ file_ dest (which is set to $ORACLE_BASE/
I
value of NONE disables auditing. admin/$ORACLE_SID/adump if the database is created n
o
Keep in mind that you should bounce your using DBCA). OnWindows systems. si
r
e
database instance for change to take effect. When These audit records are written to the Event V

recorded in the database, most audit entries are Viewer logfile. Sowe can find the locations for gathering VI

recorded in the SY S AUD $ table. On UNIX systems, information as describe in following chart. e
u
s
s
I
Explore$ORACLE_HOME/dbs and i nvest igate in one of XIII
fol lowing e
m
u
spfile$ORACLE_SID .ora Vol
snpit$filOe.Ro AraCLE_SID .ora ( )C DDDDDDDD

y
g
o
ol
n
h
c
e
T
Look for parameter Audit _trail
d
n
a
Audit e
nc
e
ci
S
Audit_trail=DB AUDIT_TRAIL=OS er
ut
p
m
o
C

of
Is Your OS=Unix base InIvSe ysotiugra t Oe So=nDOS al
n
Inve st on SYS.AUD$ TABLE ur
Event Viewer log Jo

al
b
Glo

SYS

Find the audit file on
$ORACLE_BASE/

admin/$ORACLE_SID/adump

Figure 3 : Procedure for finding audit information
©2013 Global Journals Inc. (US)
Database Autopsy Close Look to Database Auditing for Oracle Database
What to audit? a) Management Statement Auditing
Auditing involves monitoring and recording Statement auditing involves monitoring and
specific database activity. An Oracle 11g database recording the execution of specific types of SQL
supports four levels of auditing: statements. Executions of some statements are
• Statement enabling by default, but you can modify this list by
• Privilege adding or deleting some statements to this list as
• Object explain in code.
• Fine-grained access
We discuss managing each one of this level in
following sections.
3
1
0
2
r
a
e
Y

6

I
n
o
si
r
e
V

VI

e
u
s
s
I
XIII

e
m
u
ol
V

)
C DDDDDDDD

(

y
g
o
ol
n
h
c
e
T

d Figure 4 : Modify Audit Record
n
a

ce 1. Audit the SQL statements CREATE TABLE, DROP entry for the triggering session or one entry for each
n
e TABLE, and TRUNCATE TABLE, use the TABLE auditable action during the session. Specify BY
ci
S audit option like this. You can add attribute for this ACCESS or BY SESSION in the AUDIT statement.

r
te command .The attributes are by user, whenever There are many auditing options other than
u
p successful by session, whenever not successful TABLE or INSERT TABLE. Table bellow shows all the
m
o and… statement-auditing options.
C
2. To record audit entries for specific users only,
of
include a BY USER clause in the AUDIT statement.
al
rn For example, to audit CREATE, DROP, and
ou TRUNCATE TABLE statements for user scott only …
J
al 3. Frequently, you want to record only attempts that
b fail—perhaps to look for users who are probing the
o
Gl system to see what they can get away with. To

further limit auditing to only these unsuccessful

executions, use a WHENEVER clause.

4. You can alternately specify WHENEVER
SUCCESSFUL to record only successful

statements. If you do not include a WHENEVER

clause, both successful and unsuccessful

statements trigger audit records. You can further

configure non-DDL statement to record one audit
©2013 Global Journals Inc. (US)
Database Autopsy Close Look to Database Auditing for Oracle Database
Statement-Auditing Option Triggering SQL Statements

ALTER SEQUENCE ALTER SEQUENCE

ALTER TABLE ALTER TABLE

COMMENT TABLE COMMENT ON TABLE COMMENT ON COLUMN

DATABASE LINK CREATE DATABASE LINK DROP DATABASE LINK

DELETE TABLE DELETE

EXECUTE PROCEDURE Execution of any procedure or function or access to
any cur-sor or variable in a package
3
GRANT PROCEDURE GRANT on a function, package, or pr ocedure 01
2
GRANT SEQUENCE GRANT on a sequence r
a
GRANT TABLE GRANT on a table or vie w Ye
INDEX CREATEINDEX 7

INSERT TABLE INSERT into table or view

I
LOCK TABLE LOCK n
o
NOT EXISTS All SQL statements rsi
e
V
PROCEDURE CREATE FUNCTION DROP FUNCTION CREATE
PACKAGE CREATE PACKAGE BODY DROP VI
e
PACKAGE CREATE PROCEDURE DROP u
s
s
PROCEDURE I
PROFILE CREATE PROF ILE ALTER PROFILE DROP PROFILE XIII
ROLE CREATE ROLE ALTER ROLE DROP ROLE SET ROLE me
u
SELECT SEQUENCE SELECT on a sequence ol
V

SSEEQLEUCETN TCAEB LE SCERLEEACTTE fSroEmQ UtaEbNleC oEr DviRewO P SEQUENCE ( )C DDDDDDDD

y
SESSION LOGON g
o
ol
SYNONYM CREATE SYNONYM DROP SYNONYM n
h
c
SYSTEM AUDIT AUDIT NOAUDIT e
T

SYSTEM GRANT GRANT REVOKE d
n
a
TABLE CREATE TABLE DROP TABLE TRUNCATE TABLE e
c
n
TABLESPACE CREATE TABLESPACE ALTER TABLESPACE DROP e
ci
TABLESPACE S

TRIGGER CREATE TRIG GER ALTER TRIGGER (to enable or er
t
u
disable) ALTER TABLE (to enable all or disable all) p
m
UPDATE TABLE UPDATE on a table or view o
C
USER CREATE USER ALTER USE R DROP USER of

VIEW CREATE VIEW DROP VIEW al
n
r
u
o
Table 4.1:Auditing Option J
al
All needed information about STAEMENT ob
auditing will exist in the DBA_STMT_AUDIT_OPTS data Gl
dictionar y view. Y ou can query this view to find needed
informations, therecorded in formations are

©2013 Global Journals Inc. (US)
Database Autopsy Close Look to Database Auditing for Oracle Database
3
1
0
2
r
a
e
Y
8 Figure 5 : Structure of Table

You can enable administrator auditing by of your tuning efforts. Among the information recorded

I setting the initialization parameter AUDIT_ SYS_ in the audit records are the username, logon time, logoff
n
o
si OPERATIONS=TRUE All the activities performed time, and the number of physical reads and logical
r
e connected as SYS or SYSDBA/SYSOPER privileges are reads performed during the session. By looking for
V
VI recorded in the OS audit trail. sessions with high counts of logical or physical reads,
If you enable AUDIT SESSION, the database you can identify high-resource-consuming jobs and
e
u
s creates one audit record when a user logs on and narrow the focus of your tuning efforts.
s
I updates that record when the user logs off successfully.
XIII These session audit records contain some

e valuable information that can help you narrow the focus
m
u
ol The following are statements will create records by default-
V

)C DDDDDDDD ALTER ANY PROCEDURE CREATE ANY TABLE DROP USER
( ALTER ANY TABLE CREATE EXTERNAL JOB EXEMPT ACCESS POLICY

y ALTER DATABASE CREATE PUBLIC DATABASE LINK GRANT ANY OBJECT PRIVILEGE
g
o
ol ALTER PROFILE CREATE SESSION GRANT ANY PRIVILEGE
n
h ALTER SYSTEM CREATE USER GRANT ANY ROLE
c
Te ALTER USER DROP ANY PROCEDURE ROLE

d CREATE ANY LIBRARY DROP ANY TABLE SYSTEM AUDIT
n
a CREATE ANY PROCEDURE DROP PROFILE
e
nc
e You can restricts and limit this by using (displays all standard audit trail entries) and
ci
S command “no audit” in order to not decrease your USER_AUDIT_TRAIL (the standard audit trail entries

r
e operation time and also avoid overwrite of audit file related to the current user. For example, you can view
t
u
p which cause lose important information so you need . the user, time, and type of statement audited for user
m
o Scott byexecuting the following:
C b) Examining the Audit Trail
of Statement, privilege , and object audit records SELECT username, timestamp, action name
al are written to the SYS.AUD$ table and made available FROM dba_audit_trail
rn via the data dictionary views DBA_AUDIT_TRAIL WHERE username =scott;
u
o
J

al ORA USER TIMESTAMP ACTION_NAME
b
o
Gl SCOTT 6/15/2004 18:43 LOGON
SCOTT 6/15/2004 18:44 LOGOFF

SCOTT 6/15/2004 18:46 LOGON

SCOTT 6/15/2004 18:46 CREATE TABLE

Table 4.2

c) Managing of Privilege Auditing
Privilege auditing involves monitoring and or GRANT ANY PRIVILEGE. You can audit any system

recording the execution of SQL statements thatrequire a privilege. As we discussed before the command that
specific system privilege, such as SELECT ANY TABLE you will use is AUDIT statement, specifying the system
©2013 Global Journals Inc. (US)
Database Autopsy Close Look to Database Auditing for Oracle Database
privilege that you want to monitor, or user, or even SELECT statements on the HR.EMPLOYEES TABLE,
include DML privilege. execute the following:
If you want to make report of which privilege is
AUDIT select ON hr. employee:
recording in audit records you will query
You can further configure these audit records to
DBA_PRIV_AUDIT_OPTS data dictionary views.
record one audit entry for the triggering session or one
To disable auditing of a system privilege, use a
for each auditable action during the session by
NOAUDIT statement. The NO AUDIT statement.
specifying BY ACCESS or BY SESSION in the AUDIT
Allows the same BY options as the AUDIT
statement. This access/session configuration can be
statement.
defined differently for successful or unsuccessful
d) Managing of Objects Auditing executions. 3
Object auditing involves monitoring and The object-auditing options that are enabled in 1
0
recording the execution of SQL statements that require a the database are recorded in the DBA_OBJ_ 2
r
specific object privilege, such as SELECT, INSERT, AUDIT_OPTS data dictionary view. Unlike the statement ea
Y
UorP DsyAsTtEem, D EpLriEviTleEg, eo r aEuXdEitCinUgT, Es.c Uhnemlikae eoitbhjeerc ts taatuedmiteinngt and priviTlehgee _DABUAD_IOT_BOJP_ATSU DviIeTw_Os,P TS data dictionary 9
cannot be restrict to specific users, it is enabled for all view always has one row for each auditable object in the
users or no users. database. There are columns for each object privilege I
You enable object auditing with an AUDIT that auditing can be enabled on, and in each of these on
statement, specifying both the object and object columns, a code is reported that shows the auditing rsi
e
privilege that you want to monitor. For example, to audit options let’s see following codes. V
VI

e
u
s
s
I
XIII

e
m
u
ol
V

( )C DDDDDDDD

y
g
o
ol
n
h
c
e
T

d
n
a

e
c
n
e
ci
S

r
e
t
u
p
m
o
C

of

al
n
r
u
o
J

al
b
o
Gl
Figure 6 : Empty View
As you can see the view is empty because the
audit is not activate ,so we will activate object auditing
for employees table of hr schema. And try to access the
table.
©2013 Global Journals Inc. (US)