Back to Basics – Protecting data with row-level and column-level security using Oracle VPD

Join the Database Security product management team on the second Wednesday of the month at 10:00 am US Central time for Database Security Office hours. We hold these sessions each month to keep you updated on what's new with Oracle Database security. We cover announcements about new features, products, and capabilities followed by a discussion of some technical topic. Each session ends with an opportunity for open Q&A about database security. July's DB Security Office Hours will focus on a core security feature of Oracle Database Enterprise Edition that has been available since 1999 with Oracle Database 8i. Oracle VPD, also known as row-level security or fine-grain access control, allows you to create security policies to control database access at the row and column level. Dan Morgan, Technical Director of Database and Cloud Security, Oracle Consulting Services, and Oracle ACE Director Alum, will join Richard C. Evans, Oracle Database Security Product Manager, for this month’s presentation. Together, they will cover the business case for Oracle VPD, compare it to other Oracle solutions, and provide a demonstration you can use on the Oracle DB Security LiveLabs environment or an Oracle Autonomous Database. Here is a guide to the recording; 01:33 What DB Security Office Hours is (w QR Code) 02:18 Announcements 02:54 Stay on top of your Oracle Database patches! 03:39 Migrate from traditional auditing to unified auditing 05:53 Oracle Support Corner - Oracle VPD MOS Notes 06:40 Oracle Livelabs DB Security labs updated! Get hands on with Oracle Database Security products and features 07:53 New Oracle LiveLab! Oracle Advanced Compression and Oracle Transparent Data Encryption 09:14 Oracle Database 23c FREE Developer Release 09:38 Oracle SQL Firewall on 23c FREE 11:00 Oracle Virtual Private Database (VPD) presentation 12:48 What is Oracle Virtual Private Database (VPD)? 14:42 Business cases for Oracle VPD 19:09 What makes VPD both powerful and versatile? 22:26 Simply put... 24:24 VPD policies use PL/SQL functions to define business logic 26:20 Enforcing VPD policies on specific SQL statement types 27:22 Enforcing VPD policies for column-level controls 28:44 VPD policy types 31:04 VPD policy groups 31:39 The VPD process 34:58 VPD compared to other Oracle options and features 37:41 Demonstration overview 37:57 Oracle LiveLabs for VPD - download script 40:18 Demonstration of Oracle VPD 51:30 Adding an additional condition statement to the function 51:46 Troubleshooting Oracle VPD on the Oracle Database server 53:25 DB Security Office Hours - notes and links 53:57 Wrap-up