SANS Institute Product Review: Oracle Entitlements Server

Webcast covering SANS Institute's Product Review of Oracle Entitlements Server

1. Demystifying External Authorization: Oracle Entitlements Server Product Review Tanya Baccam , Senior Instructor and Courseware Author, SANS Roger Wigenstam, Sr. Director of Product Management, Oracle © 2012 The SANS™ Institute - www.sans.org

2. Speakers Senior Instructor SANS Tanya Baccam Sr. Director Product Management Roger Wigenstam

3. Agenda External Authorization Overview Oracle Entitlements Server Product Review Q&A

4. Defining External Authorization Data Applications Web Services Data redaction and filtering for data at rest and data in motion. Fine-grained access to applications based on roles, entitlements, attributes , runtime context Access control for sensitive documents stored in portals and content management systems based on roles and identity attributes Portals “Managing granular access permissions for applications, middleware and databases by externalizing and centralizing standards-based authorization policies.” Context-Aware Access Control Data filtering for standards-based web services

5. Regulatory Considerations Role Explosion Fragmented Security Why Is It Important? Regulations are getting complex and often demand enforcement of Granular Access Privileges Role explosion makes it difficult to secure transactions and data based on roles Authorization policies are often hardwired into application business logic

6. Applying External Authorization Content Collaboration Privacy Confidentiality Regulation Audit

7. Web Services (SOA) Security Web Access Control Application Transactions Relational Database Information Portals (SharePoint, etc) Common Use Cases

8. Entitlements Server Product Overview Roger Wigenstam Sr. Director of Product Management, Oracle ©2012 Oracle Corporation

9. Oracle Entitlements Server (OES) Unified External Authorization for Applications, Web Services, Portals and Databases Standards-based Policy Enforcement at Run-time Declarative Security Model Simplifies Application Lifecycle

10. Real-Time Authorization Sub-millisecond Authorization Response Time ©2012 Oracle Corporation Massively scalable External Authorization Management Scales easily to large number of protected resources Hundreds of millions of users Thousands of roles From small workgroups to mission-critical deployments Authorization checks enforced with real-time latency

11. Comprehensive Standards Support Oracle Confidential Attribute Based Access Control XACML OpenAZ NIST Role Based Access Control Enterprise RBAC Java2 / JAAS Code Based Access Control JSR 115 / JACC* Data Security

12. Development FWK’s SOA XML Gateways Application Servers Portals & Content Mgmt Identity Management Data Sources Policy Store < XML > Oracle Confidential Native & Custom Integrations

13. Oracle Entitlements Server Product Review Tanya Baccam , SANS ©2012 Oracle Corporation

14. Use Cases Data Security SharePoint Security Web Services Security Application Access Control

15. Architecture OES Admin Server PEP Identity Store Policy Store PEP PDP PEP PDP PDP Id Store PIPs Id Store PIPs Id Store PIPs

16. Application Access Control Web Access Control (URL-based and Fine-grained ) Attribute based Access Control (ABAC/XACML) Static and Dynamic Role Mapping Role Inheritance Separation of Duties Checks Runtime Constraint and Context-aware Policy Enforcement Integration with LDAP-based directories * Oracle Entitlements Server can be used to enforce multiple compliance requirements.

17. Data Security Selective Data Redaction/Filtering - Row-level security -Columnar security Centralized Authorization Policy Administration for Databases Integration with major databases (Oracle, DB2, Sybase, MySQL ) * OES enables management of access policies based on business need.

18. SharePoint Security Document Access Control (based on document tags, attributes, location, user, role, etc) Custom Page Content (FGA checks for ASP.NET pages ) Integration with Active Directory and LDAP-based directories * OES provides a variety of authorization decisions for different types of applications and users.

19. Web Services Security Integration with XML Gateways Selective Data Redaction/Filtering for SOA web services Support for a variety of message standards (XML/SOAP/REST/JMS) * Policies can be set up to secure connectivity to SOA and cloud environments..

20. New York April 12 th Toronto April 17 th Boston April 19 th Aberdeen Group Event Series Featuring Derek Brink Chicago April 10 th San Francisco May 22 nd Register at: www.oracle.com/identity

21. Platform Best Practices Agilent Technologies Available On-Demand Platform Webcast Series Oracle Customers Discussing Results of Platform Approach Cisco’s Platform Approach Cisco Systems Available On-Demand Platform for Compliance ING Bank April 11 th 2012 Platform Business Enabler Toyota Motors May 30 th 2012 Register at: www.oracle.com/identity

22. Securing Oracle https ://www.sans.org/security-training/securing-oracle-74-mid

23. www.facebook.com/OracleIDM www.twitter.com /OracleIDM blogs.oracle.com /OracleIDM www.oracle.com/identity ©2012 Oracle Corporation

24. Questions