Oracle Readies Database Vault, Secure Backup

The Redwood Shores, Calif.-based software vendor's new Database Vault will ship within weeks on Linux, and Solaris, Windows and other versions will follow, said Andy Mendelsohn, senior vice president of database server technologies at Oracle.

Database Vault and the upcoming Audit Vault from Oracle could be a one-two punch for companies hoping to prevent unauthorized viewing, copying or tampering of data. Audit Vault, due out later this year,would "watch" database activity and funnel all that data to a separate, secure repository.

Database Vault, which is available for the current Oracle Database 10g Release 2, will enable companies to "put firewalls around financial data" so that DBAs and systems administrators cannot see data they shouldn't, Mendelsohn told CRN.

"DBAs right now are pretty much all-powerful. They can see anything. [Database] Vault lets you put a wall around that data," he said. "Once you do that, folks with no need to see financial data are locked out of that realm."

Oracle executives touched on the technology--sometimes called Project Data Vault--at Oracle World last fall.

Mendelsohn will detail Database Vault, along with new secure, automated backup-to-tape for Oracle, on Wednesday at the annual Independent Oracle Applications User Group (IOUG) conference in Nashville, Tenn. The database add-on will cost $20,000 per CPU.

Oracle partners can use the technology to bolster regulatory compliance for their customers, ISVs and solution providers said.

Database Vault is a "clean method to control who can do what [with the data] and protect against insider threats," said Dwayne Melancon, vice president of business development at Tripwire, a Portland, Ore., ISV specializing in IT auditing software.

Jay Thompson, managing director of Protiviti, an Irvine, Calif.-based company specializing in internal audit and technology risk assessment consulting services, concurred.

"On the tech side, Database Vault could raise the bar as to what companies can do in providing controls. There's nothing similar on the market yet," he said.

Database Vault provides the preventive side and Audit Vault, which watches the database, detects bad behavior, Thompson added.

Audit Vault, also outlined briefly at Oracle World, collects information on who accesses, deletes and changes data and when they do it, as well as funnels all that information to a separate and secure repository.

Mike Rudolph, vice president of product management at LogicalApps, another Oracle ISV, said the software will help his company plug security holes at customer sites.