Hacking and Forensicating an Oracle Database Server

Architecture and Background

David Litchfield - Hacking and Forensicating an Oracle Database Server David Litchfield is recognized as one of the world's leading authorities on database security. David Litchfield contextualize these mechanics within the broader appsec landscape.

Vulnerability Analysis

The analysis investigates key threat vectors and design shortcomings related to database-security, db2, sql-security, access-control.

Exploitation and Demonstrations

David Litchfield - Hacking and Forensicating an Oracle Database Server David Litchfield is recognized as one of the world's leading authorities on database security. He is the author of Oracle Forensics, the Oracle Hacker's Handbook, the Database Hacker's Handbook and SQL Server Security and is the co-author of the Shellcoder's Handbook. He is a regular speaker at a number of computer security conferences and has delivered lectures to the National Security Agency, the UK's Security Service, GCHQ and the Bundesamt f¸r Sicherheit in der Informationstechnik in Germany.

Remediation and Defensive Strategies

Defenders and researchers are provided actionable defensive mitigations, monitoring telemetry, and configuration safeguards to minimize systemic risk.