Isn't label security the new name for what used to be known as Trusted Oracle in Oracle 7? Was Trusted Oracle implementation based on the RLS model(which I think is an 8i feature) or was it different? Essentially could you please tell what are the differences between the Trusted Oracle implementation and Label Security? Thanks.

I also was thrown into Trusted Oracle back in 95. I had alot of interesting days working with the product and integrated webservers (back before they were application servers) onto trusted solaris, dec mls, sco's mls and hp cmw.

Replication was very intersting when Trusted Oracle was involved.

OLS, previously Military security is also an interesting product. The key piece missing is the multilevel listener to allow OLS to work on Trusted Solaris.

OLS is a good product but is designed after the Trusted Oracle model with levels, and compartments (also now inverse compartments as a result of my beta testing), and a new feature groups. If your data fits this model, then OLS is the product for you.

Tom,

I need to implement data classification, I need to associate labels like 'sensitive', 'classified', 'public', etc to each record along with some other attributes such as ROLE (manager, programmer etc. Would I be able to do it using VPD/FGAC or I need to have OLS?
Thank you for your answer

Tom,

In OLS, I can define level, group and compartment, whereas in VPD we filter data by a some field. In OLS, we need to create a new field to store values for group, compartment and level combination, whereas, in VPD we donot change the table definition. So why does OLS need this new column? In OLS, as we know, access to data is controlled in three dimension, could we do this in VPD?

I am working on a Data Classification project and I have been asked to justify why do I need OLS?

Could you give me some references of agencies who are uusing OLS or some success story.

Thanks

is one - but your sales team would be able to provide more specific industry references easily.

here are some more:

TSA

Boeing

these guys are on 8i... but they are using it ;-)

If you would like to talk to our sales team about which government agencies are utilizing our OLS products you are more than welcome to!

Here are a few links to our products, hope this helps:

</code> http://www.gd-ais.com/Capabilities/offerings/ia/tne.htm

Here is, essentially, a PDF sales brochure:

http://www.gd-ais.com/Capabilities/offerings/ia/documents/TNE_Capabilities_001.pdf

Pages 25 – 28 discuss our product.  On page 27, there is an image of our network architecture:

http://www.sun.com/solutions/documents/white-papers/SNAP_SolutionsGuide.pdf?null <code>

Tom, VPD is based on fine grain access control? Are VPD and FGAC pretty much the same? The reasn for asking - product features list says VPD is available only in EE. Does it mean that XE (or any other but EE) doesn't have FGAC? There is no way to create policies etc.? Just confused by all these acronyms and terms...
Thank you very much!!!

We are building a enterprise wide data warehouse and we need to classify the data. We have several subject areas such as Contract, Accounting, Payrrole etc. For example my INVOICE_FACT fact table contain following columns:

Agency_id
Acc_id
Contract_id
Payee_id
Invoice_dt_id
Invoice_num
AMT
Audit_Amt
Transaction_Amt

In this fact table my Compartment is Invoice and combination of following columns have different sensitivity level:

data classification Sensitivity Level
(agency_id,contract_id) PUBLIC
(agency_id,contract_id,payee_id) CONFIDENTIAL
(agency_id,contract_id,audit_amt) HIGHLY SENSITIVE


I am not sure how I will be able to implement this kind of label security using OLS, do I need to implement column lavel security using VPD or should I use sub category in defining my compartments, such as INVOICE is main compartments, under INVOICE, I have following three compartments:
INVOICE_PUBLIC
INVOICE_CONFIDENTIAL
INVOICE_HIGHLY_CLASSIFIED.

Hopeing to hear from you.

Thanks