Together with Oracle Data Safe, Cloud Guard and Maximum Security Zones, customers can better protect their critical workloads. These intelligent systems operate in the background enforcing security practices, gathering telemetry from across the Cloud environment, and surfacing misconfigurations, anomalous behaviour and risks to respond to through automated means. With the new capabilities, customers of Oracle Cloud will not bear the burden of designing secure architectures from scratch and will be better protected from the consequences of misconfigurations than they are in other Cloud environments today.
"Data is your most valuable asset, and hackers will exploit any weakness, whether in databases, their users, or their infrastructure", stated Vipin Samar, senior vice president, Database Security, Oracle. "We created Oracle Data Safe to help organisations secure their data in the Cloud, irrespective of their size or security expertise."
Cloud enables organisations to better address a cyber threat landscape that continues to increase in size and complexity. In the 2019 Oracle KPMG Cloud Threat Report, 72 percent of organisations responded that security in the Cloud is better than what they can achieve on their own. Today, Oracle is introducing security capabilities that collectively automate security processes at all layers of the Cloud stack from the infrastructure to the application layer.
"We are seeing enterprises make too many configuration errors when setting up their Cloud services. This is putting their business at risk needlessly", stated Maxine Holt, research director, Ovum. "By allowing for pre-set templated configuration of their Cloud services, enterprises will be better protected knowing that the right security services are not only turned on, but more closely aligned to their business needs and policies."
Oracle Data Safe is a unified control center for automating database security and improving visibility into security issues with data, users, and configuration. Oracle Data Safe provides vital security controls, including monitoring database activity, discovering sensitive data, and masking databases to help minimize security risk. Built from the ground up, leveraging Oracle's decades of database security experience, Oracle Data Safe helps customers protect their Oracle Database Cloud services, including Oracle Autonomous Database. It complements the security features already in Oracle Autonomous Database, such as always-on encryption and self-patching. Available now on Oracle Cloud Infrastructure, Oracle Data Safe is included with all Oracle Database Cloud services.
Oracle Cloud Guard is a unified security solution that provides a global and centralized approach to the protection of all of a customers' assets. It works to analyze data, detect threats and misconfigurations automatically, then hunt down and kill those security threats without requiring human oversight. Oracle Cloud Guard continuously collects data from every part of the infrastructure and application stack, including audit logs, Oracle Data Safe, Oracle OS Management Service, as well as third-party products. Oracle Cloud Guard proactively detects and stops anomalous activity it identifies, shutting down a malicious instance automatically, and proactively revoking user permissions when it detects anomalous user behaviour.
Oracle Cloud Maximum Security Zones comprises an enclave within a customer's environment where security is mandatory and always on. It provides a combination of automated preventative and detective means to enforce security controls and practices to customer defined configurations of Oracle Cloud resources. Customers effectively lock down resources to known secure configurations, automatically prevent configuration changes, and continuously monitor and block anomalous activities. Maximum Security Zones are enforced through the automated activation of all relevant and preconfigured security services, including application security and the new Cloud Guard.