Skip to Content

Wiki source code of Oracle_Security

Last modified by Mihail Opinca on 2026/02/05 18:25
Show last authors
1 **Oracle AI Database 26ai** (on-premises version for Linux x86-64) brings major improvements in data security, especially in the context of the use of artificial intelligence and growing threats. Below is a detailed summary of the main security updates introduced in this release.
2
3 == Main Security Improvements ==
4
5 === SQL Firewall ===
6
7 **SQL Firewall** is now fully integrated into the database core. It analyzes each SQL request in real time and only allows authorized requests to be executed. It takes into account the context of the session: IP address, OS user, program, connection path.
8
9 * Blocks SQL injections (including zero-day), abnormal access and credential theft.
10 * Works both at the root container level and in the PDB.
11 * Ideal for protecting applications and AI agents.
12
13 Key advantage: protection without middleware — impossible to bypass.
14
15 === Multi-factor authentication (MFA) for local users ===
16
17 MFA is now also available for local (native) database users. Supported are:
18
19 * Push notifications via Oracle Mobile Authenticator (OMA)
20 * Cisco Duo
21 * Certificate authentication
22
23 Even if the password is compromised, access is blocked without the second factor.
24 Available starting with Release Update 23.9 and later.
25
26 === Schema Privileges ===
27
28 New schema privileges simplify access management. Now you can grant privileges (e.g. SELECT ANY TABLE) directly on the entire schema, not on each object.
29
30 Special administrative privileges have been introduced:
31
32 * ADMINISTER ROW LEVEL SECURITY POLICY
33 * ADMINISTER FINE GRAINED AUDIT POLICY
34 * ADMINISTER REDACT POLICY
35
36 New views: DBA_SCHEMA_PRIVS and others.
37
38 Advantage: easier compliance with the principle of least privileges, less manual work and reduced risks of privilege escalation.
39
40 === Maximum password length increased ===
41
42 The maximum password length has been increased to **1024 bytes** (from only 30 bytes previously). Supports multicharacter sets (NLS), long passwords from IDCS / IAM.
43
44 Allows the creation of much stronger passwords and unifies the rules with Oracle cloud services.
45
46 === Read-Only users and sessions ===
47
48 New mechanisms allow the creation of users or switching sessions to **read-only** mode (temporarily or permanently), regardless of existing privileges.
49
50 Useful for testing, administration, and limiting access to certain segments of applications without changing roles.
51
52 === DB_DEVELOPER_ROLE Role ===
53
54 The new **DB_DEVELOPER_ROLE** role is specifically designed for application developers. It grants only the strictly necessary privileges, respecting the principle of least privilege — without granting unnecessary broad rights.
55
56 Reduces risks and simplifies the work of developers in a secure environment.
57
58 === Kerberos, RADIUS and local auto-login wallet improvements ===
59
60 * Updated Kerberos library (MIT Kerberos 1.21.2)
61 * RADIUS improvements (more flexible and secure configuration)
62 * Local auto-login wallets are more secure and strictly tied to the host (no root access required)
63 * Improved protection for TDE keystores
64
65 === Banning deprecated ciphers ===
66
67 New parameter in sqlnet.ora:
68 **SSL_ENABLE_WEAK_CIPHERS = FALSE**
69
70 Completely bans the use of outdated and insecure ciphers. Simplifies compliance with security standards and audits.
71
72 === DBMS_CRYPTO improvements ===
73
74 Extension of the PL/SQL package DBMS_CRYPTO: new algorithms, improved performance and increased security for cryptographic operations.
75
76 === Column Level Auditing ===
77
78 Now you can audit access and changes on individual columns, not just the entire table.
79
80 Perfect for GDPR, PCI DSS and other regulatory compliance – precise control over sensitive data.
81
82 == Conclusion ==
83
84 Oracle AI Database 26ai offers a significant leap in database security, especially for AI-intensive environments and large data volumes. Most features are already available in the latest Release Updates.
85
86 == Download and test it yourself! ==
87
88 * Oracle AI Database 26ai (on-premises, Linux x86-64): [[Download here>>https://www.oracle.com/database/technologies/oracle-database-software-downloads.html#db_ee]]
89 * Full release notes – security: [[Release Changes — Security>>https://docs.oracle.com/en/database/oracle/oracle-database/26/dbseg/release-changes.html]]
90
91 Which security feature would you like to test first? Leave comments below!
92
93 #Oracle26ai #OracleDatabase #DataSecurity #DataProtection #TechnologicalInnovation
94
95 ---