Secure connections to oracle

Dear List,

Developing application to talk with Oracle 10g database from Windows platform.

Oracle Data Provider (ODP) .NET is going to be used to provide connectivity

Connectivity will be used by application to connect to the Oracle DB

What are the security issues in this implementation?

1. Is the ODP .NET connection encrypted? (as per the docs I have seen, there is no mention of encryption)

2. User credentials will have to be 'hard-coded', which means that someone with access to the scripts will be able to extract the UserID/Password to connect to the database. Are there ways to protect the script?

3. Any other security issues with this setup?

thank u all for ur help

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------

Relevant Pages

  • (Fwd) Re: Cross-version DBD Oracle Connectivity for local SYSDBA connection
    ... Subject: Re: Cross-version DBD Oracle Connectivity for local SYSDBA connection ... I am working on Perl application that needs to be able to work with multiple versions of Oracle ... would end up with the segmentation core dump, when trying to connect to 10g database (with the ...
    (perl.dbi.users)
  • Re: Unspecified error: E-Fail (0x80004005)
    ... Why are you using OleDb? ... is the Oracle client installed? ... connectivity to your database from that machine? ... > We connected with OLEDBConnect to oracle database in a asp.net and C#. ...
    (microsoft.public.dotnet.framework.adonet)
  • Re: connectivity to Oracle
    ... and tables,i mean database is in oracle. ... RobinS wrote: ... Is your database Oracle? ...
    (microsoft.public.dotnet.languages.vb)
  • Re: ODBC
    ... My preference has always been to get the database vendor to provide the connectivity to use with .Net. ... I've done that with Oracle and it worked SO MUCH BETTER than the MS version. ... The beauty of .net is it allows the database to only be connected to for the length of time you need it. ... I'm quite worried that my use of Microsoft.Data.odbc.dll to connect to Teradata will impose application performance issuesby constantly connecting/disconnecting/connecting again etc. ...
    (microsoft.public.dotnet.languages.vb)
  • Re: Returning CURSORS from ORACLE STORED FUNCTIONS
    ... I STRONGLY recommend that you use ODP with the 10g database. ... For earlier versions of Oracle I haven't found a compelling reason to use ODP. ...
    (microsoft.public.dotnet.framework.adonet)