Question: How does 12c hidden
parameter
_sys_logon_delay work?
Answer: The
Oracle12c new feature
_sys_logon_delay defines a failed logon delay
for the sys user.
Rampant
author and security guru
Paul Wright shows this working example of the
_sys_logon_delay parameter. He notes that
_sys_logon_delay=0 will disable this delay and that a higher
value for sys_logon_delay will help disable a hack attacker
as shown in this example:
while true;do
sqlplus -S -L sys/wrongpw@orlin:1521/orcl3 as sysdba;sleep
0;done;
ERROR:
ORA-01017: invalid username/password;
logon denied
8<; --- Slow steady pace between failed logons thus making
remote brute force infeasible.
--can set to 0 to
disable, or to higher value to slow down attacker, but needs
a restart.
--e.g. alter system set "_sys_logon_delay"=0 scope=spfile;
SQL>; select banner
from v$version;
BANNER
--------------------------------------------------------------------------------
Oracle Database 12c Enterprise Edition
Release 12.1.0.1.0 - 64bit Production
PL/SQL Release 12.1.0.1.0 - Production
CORE 12.1.0.1.0 Production
TNS for Linux: Version 12.1.0.1.0 -
Production
NLSRTL Version 12.1.0.1.0 - Production
