Establishing Digital Trust: Don't Sacrifice Security for Convenience
The Equifax data breach is top of mind for Oracle's founder Larry Ellison, so much so that he mentioned it repeatedly during his opening keynote for Oracle's OpenWorld event on Oct. 1. Ellison ridiculed Equifax missteps while hinting at new Oracle technology that would help to prevent Oracle customers from becoming the next data breach headline.
With Equifax, a known vulnerability in the Apache Struts framework led to a data breach that exposed personally identifiable information on 143 million Americans.
"The biggest threat by far in cybersecurity is data theft," Ellison said. "Preventing data theft is all about securing your data."
For Ellison, the promise that he made to the OpenWorld audience is that the safest place to store data is an Oracle database. At OpenWorld, Oracle announced its new Oracle 18c database with what the company refers to as autonomous capabilities. The autonomous capabilities including auto-tuning as well as automatic patching capabilities.
Beyond just the Oracle 18c database, Ellison said that his company plans on announcing a new cyber-security service on Oct. 3 that will provide additional risk mitigation and defensive capabilities.
"You have to know when you're being attacked and as they come in and you better detect that during reconnaissance phase," Ellison said. "The attacker's goal is to take your data and send it someplace else."
The new Oracle cyber-security service has been designed to automatically detect threats when they first occur. The service will then direct the Oracle database to immediate defend and remediate against the detected problem.
Automated defenses, including automated patching, are key to having a resilient cyber-defense in Ellison's view. He noted that existing patching systems didn't work at Equifax.
"We have to automate our cyber-defences and you have to be able to defend yourself without taking your systems offline or shutting down your database," Ellison said.
The new cyber-security security service will be based on the same underlying technology foundation as the Oracle 18c database and makes extensive use of machine learning to help detect threats.
"No human error, means no opportunities for human malicious behavior," Ellison said.
Sean Michael Kerner is a senior editor at eSecurityPlanet and InternetNews.com. Follow him on Twitter @TechJournalist.