Information Technology, Control, Audit and Security Experience

Oracle Human Resources Management System (HRMS) is a major component of the Oracle E-Business Suite of applications. Simply put, It is an integrated suite of applications which supports every aspects of the HR function. There are several modules defined in Oracle HRMS eg  Oracle Human Resources (HR),Oracle Payroll,Oracle Performance Management,Oracle iRecruitment,Oracle Time & Labor(OTL) etc . In this post we will be looking at the HR module. I will be showing you the basic and foundation elements in the Oracle HR module back-end database you should be aware of. This post will be of interest to IT Auditors, IT Control and General IT professionals Oracle HRMS uses  what is called Indicative data which is the basic information about a person and its employment data. Indicative Data consist of: Personal Employment related Below is a list of important backed HR table with their uses: Please note that these tables are owned by the HR Schema per_...

A data state is described as the different condition of data while being utilized in a computing environment.  The term is especially used in information security. In this post you will learn the various states data can be in. As an added bonus, you will also learn the various ways we can also protect this data at each individual states.

ARP poisoning also known as ARP Spoofing is an attack on the network which allows the attacker to intercept network communication between the target computer and the network. This concept is called MAN-IN-THE-MIDDLE attack and it makes it easy to steal sensitive data like username and passwords, bank data  etc. The man in the middle attack can occur because the attacker modified the ARP table to change the ARP mapping to a malicious attackers computer MAC addresss. In this post I will be showing you how ARP poisoning is performed and how we can protect against it. To understand more about ARP, please click here. Address resolution Protocol or ARP for short is used to resolve an IP address to a MAC address. There is a table maintained for monitoring and resolving the IP addresses. It is called an ARP table Without wasting much of your time, lets begin What is needed This lesson will be done from a virtual machine for training purposes. In real life it is actually do...

Address Resolution Protocol (ARP) Poisoning also known as ARP Spoofing , Man-in-the-Middle Attack, ARP Flooding, etc. ARP Poisoning allows an attacker to associate his MAC address (the sole means of computer to computer communication) with the victim’s IP address. As a result, whatever traffic is sent from the victim’s end is first sent to the attacker, where he has all the control to modify the traffic, exploit it or stop it. If you have read my previous post on ARP poisoning ( Click here to read ) then you will agree with me that this is a serious and silent attack that need to be prevented. For additional understanding you might also want to read this:  Address Resolution Protocol (ARP): Understanding the basics Without wasting much of your time, I have done a quick research to enumerate some interesting ways this terrible silent attack can be mitigated In a network the Address Resolution Protocol (ARP) is the standard protocol for finding a system's MAC Address when ...

Address resolution Protocol or ARP for short is basically used to resolve an IP address to a MAC address. A MAC address is a unique identifier for any device. And since we are talking networking today, The mac address we will be concentration on is that of a network device. Its important to note that, no two device can have the same mac address. Whenever a network device needs to communicate with another network device in a Local Area Network, it needs the MAC address of that device. This is where ARP comes to play. Lets take a look at the scenario bellow to clearly understand this concept: 1. There are 2 computers say A and B on the network. 2. They have both been assigned an IP address as seen below:        A: 192.168.0.1        B: 192.168.0.2 3. Computer A needs to communicate with computer B. 4. It looks at a list for the IP address to see if it has a corresponding MAC address. This list is called an ARP Cache. 5. If the en...

Based on my last post on Auditing and controlling Oracle EBS (if you have not read it click here ).  A very nice reader asked if I could make a detailed post on how Oracle EBS user passwords can be hacked and extracted. This is a high risk and additionally a serious flaw on an Oracle EBS solution. Thus I decided to oblige and make the post.  It is planned to be as easy to read as possible. Enjoy.....

SQL Server, owned by Microsoft is one of the leading data platforms used as a production database to store very sensitive data. We should all know by now that data is an organization’s most valuable asset. This makes it a necessity to efficiently secure the SQL Server database. This quick post will highlight some important back-end script that can be used to quickly check the status of your SQL Server database. A comprehensive checklist is been developed and will be posted soon. Enjoy......