Oracle database link security risk

Forum Topic:

There are three types of Database Link: Private, Public, and Global. Each has different strengths and weaknesses. From a Security Point of view what are your concerns about each of the three types of link. Which is or can be the most secure?

Forum Discussion:

Database links a database security concept use by Oracle SQL. Example: data link is developed within data dictionary, where the user id and password are stored. A database link permits users to access a database tables from another database. There are three methods of linking databases: private, public, and global. Private database links are only viewable to the owner of the database. A public database links is viewable to authorized of the database. The public and private database link is created with the CREATE DATABASE LINK or CREATE PUBLIC DATABASE LINK command. The global database links is a remote database with different network within a central network domain. The global database links can be create with the CREATE SHARED PUBLIC DATABASE LINK. The most secure database link would be the private database link. The public and global database links highly risk for security breaches due to different users having access to the same link or point of connection. To mitigate security risk, database link restrictions would need to be implemented to control what level of access to tables and viewing of data according to user’s roles and classifications (Oracle Database Administrator’s Guide, 2011).

Reference

Balaji. (2008). Database Link Security. Retrieved from; https://www.pala

dion.net/blogs/database-links-security

Oracle Database Administrator’s Guide. (2011). Retrieved from; https://docs.oracle.com/html/E25494_01/ds_concepts002.htm

Reply needed for discussion: