Oracle’s security expert speaks about Oracle vulnerabilities

Oracle's Chief Security Officer recently sat down with Scarlet Pruitt of ComputerWorld to talk about her efforts in the war on protection of consumer information:

http://www.computerworld.com/securitytopics/security/story/0,10801,102002,00.html

With so much sensitive information to protect, Oracle has been working to diminish the number of vulnerabilities in its software while delivering fixes in a way that makes it easier for customers to manage them.

But just as major software vendors like Oracle are ramping up their defenses, hackers, lured by the profit potential in selling data, are becoming more skilled at their attacks.

Pruitt posed many questions on the securities of vendor software to Davidson who sees security as its own war:

This is one of the reasons I got interested in this audit problem. The U.S. Defense Department currently has physically separate networks and that provides them with a level of security. They have three networks and none are connected to the Internet. What they want to do is to get these networks to talk to each other more easily because they want to get intelligence from an intelligence source all the way out to the war fighter in real time. It has to be very secure, and it's not very different from the business problem. You want to get the right information to the right person at the right time.

If they put those networks together, then the network becomes the battlefield. If I'm the bad guy, I'm not going to bother to pick up a gun and fight you, I'm going to attack your network. I'm going to stop your ability to wage war by bringing your information systems down, and again, in a corporate world ,it's warfare. Why would I bother walking into your office and rifling through your trade secrets file if I could get it electronically?

��