Audit on oracle schema for dml statements

Question

I need to secure an oracle user for doing inserts/updates/deletes from outside programs written by me.

I googled a bit around to find what I need. I know you can use own written db triggers. And I now there are two major systems from oracle (at least that is what I found). You can use fine grained auditing. And you can use the audit trail.

I think in my case the audit trail comes close but just isn't what I am looking for. Because I need to now from which program the connection to the DB is coming. For example I need to register all connections that are doing inserts/updates/deletes with there statements executed that are coming from sql developer or toad. But all the other connections may pass without audit.

On daily basis I have lots of connections so registering everything is too much overload.

I hope one of you have a good idea on how to set this up.

Regards

Answer 1

You can use a product of Oracle: Oracle Audit Vault and Database Firewall. Because you want to know also from which program the connection comes, you need the Database Firewall. It can monitor all traffic through the database, specifying the IP address and the client from which the connection was started. You can also specify if you want to audit DML or DDL,or other statements. Data is stored locally in the product's database,not in the secure target (your database). Just have a look, it it just what you need: http://www.oracle.com/technetwork/products/audit-vault-and-database-firewall/overview/overview-1877404.html