![\"image0\"](\"https:\/\/i0.wp.com\/oracledba.zapto.org\/wordpress\/wp-content\/uploads\/2018\/02\/image0-1.png\" "\\"image0\\"")
<\/a><\/p>\n\uadf8\ub9bc 1 Transparent Data Encryption \uac1c\uc694<\/p>\n
<\/p>\n
11g\uc5d0\uc11c TDE\uc5d0 \uc0c8\ub86d\uac8c \ub3c4\uc785\ub41c \uae30\ub2a5\ub4e4\uc744 \uac04\ub2e8\ud558\uac8c \uc815\ub9ac\ud558\uba74 \ub2e4\uc74c\uacfc \uac19\ub2e4.<\/p>\n
<\/p>\n
\u201e Tablespace Encryption<\/p>\n
\u201e Managing TDE with Enterprise Manager<\/p>\n
\u201e New Database Features in TDE<\/p>\n
\u201e LogMiner<\/p>\n
\u201e Logical Standby<\/p>\n
<\/a><\/p>\n \u201e Streams<\/p>\n \u201e Hardware Security Module<\/p>\n <\/p>\n \uac01 \ud56d\ubaa9 \ubcc4\ub85c \uadf8 \ud2b9\uc9d5\uc744 \uc0b4\ud3b4\ubcf4\uace0, \ud14c\uc2a4\ud2b8 \uacfc\uc815\uc744 \uc18c\uac1c\ud558\uaca0\ub2e4.<\/p>\n <\/p>\n Tablespace Encryption<\/strong><\/p>\n <\/p>\n 11g\ubd80\ud130 \uc18c\uac1c\ub41c \ud14c\uc774\ube14\uc2a4\ud398\uc774\uc2a4 \uc554\ud638\ud654\ub294 \ud14c\uc774\ube14\uc2a4\ud398\uc774\uc2a4 \uc804\uccb4\ub97c \uc554\ud638\ud654\ud560 \uc218 \uc788\uac8c \ud574\uc8fc\ub294 \uae30\ub2a5\uc774\ub2e4.<\/p>\n \uc554\ud638\ud654\ub41c \ud14c\uc774\ube14\uc2a4\ud398\uc774\uc2a4 \ub0b4\uc5d0 \uc0dd\uc131\ub418\ub294 \ubaa8\ub4e0 \uac1d\uccb4\ub4e4\uc740 \uc790\ub3d9\uc73c\ub85c \uc554\ud638\ud654\ub418\uc5b4 \uc800\uc7a5\ub41c\ub2e4. \ud14c\uc774\ube14\uc5d0 \ubbfc\uac10\ud55c \ub370\uc774\ud130\ub97c \uc800\uc7a5\ud558\ub294 \uacbd\uc6b0 \ud14c\uc774\ube14\uc2a4\ud398\uc774\uc2a4 \uc554\ud638\ud654 \uae30\ub2a5\uc744 \uc0ac\uc6a9\ud558\uba74 \uc720\uc6a9\ud558\ub2e4.<\/p>\n \ud14c\uc774\ube14\uc2a4\ud398\uc774\uc2a4 \uc554\ud638\ud654 \uae30\ub2a5\uc744 \uc774\uc6a9\ud558\uba74 \uac01 \ud14c\uc774\ube14\uc758 \uc5b4\ub5a4 \uce7c\ub7fc\uc744 \uc554\ud638\ud654\ud574\uc11c \uc800\uc7a5\ud560\uc9c0 \uacb0\uc815\ud560 \ud544\uc694\uac00 \uc5c6\uc5b4\uc9c4\ub2e4.<\/p>\n \ud558\ub098\uc758 \ud14c\uc774\ube14\uc5d0 \uc5ec\ub7ec \ud589\uc5d0 \uac78\uccd0\uc11c \ubbfc\uac10\ud55c \ub370\uc774\ud130\ub4e4\uc774 \uc800\uc7a5\ub418\ub294 \uacbd\uc6b0\ub098 \uc77c\ubd80 \ud589\uc774 \uc544\ub2cc \uc804\uccb4 \ud14c\uc774\ube14\uc744 \ub2e4 \ubcf4\ud638\ud558\uace0\uc790 \ud558\ub294 \uacbd\uc6b0 \ud14c\uc774\ube14\uc2a4\ud398\uc774\uc2a4 \uc554\ud638\ud654 \uae30\ub2a5\uc744 \uc774\uc6a9\ud558\uba74 \uc720\uc6a9\ud558\ub2e4.<\/p>\n \ud14c\uc774\ube14\uc2a4\ud398\uc774\uc2a4 \uc554\ud638\ud654 \uae30\ub2a5\uc740 \uc554\ud638\ud654\ub41c \ud14c\uc774\ube14\uc2a4\ud398\uc774\uc2a4\uc5d0 \uc800\uc7a5\ub418\ub294 \ubaa8\ub4e0 \ub370\uc774\ud130\ub97c \uc554\ud638\ud654\ud55c\ub2e4. BLOB\uc774\ub098 CLOB\uac19\uc740 Large Object(LOBs) \ud0c0\uc785\ub3c4 \ub9c8\ucc2c\uac00\uc9c0\uc774\ub2e4.<\/p>\n \uc554\ud638\ud654\ub41c \ud14c\uc774\ube14\uc2a4\ud398\uc774\uc2a4 \uc678\ubd80\uc758 \ub370\uc774\ud130\uc5d0 \ub300\ud574\uc11c\ub294 \uc554\ud638\ud654\ub97c \uc9c0\uc6d0\ud558\uc9c0 \uc54a\uc73c\ubbc0\ub85c BFILE \ub370\uc774\ud130\uac00 \ub370\uc774\ud130\ubca0\uc774\uc2a4 \uc678\ubd80\uc5d0 \uc704\uce58\ud558\ub294 \uacbd\uc6b0\uc5d0\ub294 \uc554\ud638\ud654\ub41c \ud14c\uc774\ube14\uc2a4\ud398\uc774\uc2a4\uc5d0 BFILE\uce7c\ub7fc\uc744 \ud3ec\ud568\ud55c \ud14c\uc774\ube14\uc744 \uc0dd\uc131\ud588\ub2e4\uace0 \ud574\ub3c4 \uc774 \uce7c\ub7fc\uc740 \uc554\ud638\ud654\ub418\uc9c0 \uc54a\ub294\ub2e4.<\/p>\n \uc554\ud638\ud654\ub41c \ud14c\uc774\ube14\uc2a4\ud398\uc774\uc2a4 \ub0b4\uc758 \ubaa8\ub4e0 \ub370\uc774\ud130\ub294 \ub514\uc2a4\ud06c\uc5d0 \uc800\uc7a5\ub420 \ub54c \uc554\ud638\ud654\ub41c \ud3ec\ub9f7\uc73c\ub85c \uc800\uc7a5\ub418\uace0, \uc811\uadfc \uad8c\ud55c\uc744 \uac00\uc9c4 \uc720\uc800\uac00 \ub370\uc774\ud130\ub97c \ubcf4\uac70\ub098 \uc218\uc815\ud560 \ub54c\uc5d0 \ud22c\uba85\ud558\uac8c \ubcf5\ud638\ud654\ub418\ubbc0\ub85c \uc720\uc800\ub294 \ub370\uc774\ud130\uac00 \ub514\uc2a4\ud06c\uc5d0 \uc554\ud638\ud654\ub418\uc5b4<\/p>\n \uc800\uc7a5\ub418\uc5c8\ub294\uc9c0 \uc5ec\ubd80\uc5d0 \ub300\ud574\uc11c \uc804\ud600 \uc2e0\uacbd \uc4f8 \ud544\uc694\uac00 \uc5c6\uc73c\uba70, \ub370\uc774\ud130\ud30c\uc77c\uc774\ub098 \ubc31\uc5c5 \ubbf8\ub514\uc5b4 \ub3c4\ub09c \uc2dc\uc5d0\ub294 \ubbfc\uac10\ud55c \ub370\uc774\ud130 \uc720\ucd9c\uc744 \uc608\ubc29\ud560 \uc218 \uc788\ub2e4.<\/p>\n \ud14c\uc774\ube14\uc2a4\ud398\uc774\uc2a4 \uc554\ud638\ud654\ub294 Transparent Data Encryption(TDE) architecture\ub97c \uc774\uc6a9\ud55c\ub2e4. \ud14c\uc774\ube14\uc2a4\ud398\uc774\uc2a4 \uc554\ud638\ud654\uc5d0 \uc774\uc6a9\ub420 \ub9c8\uc2a4\ud130 \ud0a4\ub3c4 TDE \ub9c8\uc2a4\ud130 \ud0a4\uac00 \uc800\uc7a5\ub418\ub294 \uc624\ub77c\ud074 wallet\uc5d0 \uc800\uc7a5\ub41c\ub2e4.<\/p>\n \uc774 \ub9c8\uc2a4\ud130 \ud0a4\ub294 \ud14c\uc774\ube14\uc2a4\ud398\uc774\uc2a4\ub97c \uc554\ud638\ud654\/\ubcf5\ud638\ud654 \ud558\ub294\ub370 \uc0ac\uc6a9\ub418\ub294 \ud14c\uc774\ube14\uc2a4\ud398\uc774\uc2a4 \uc554\ud638\ud654 \ud0a4\ub97c \uc554\ud638\ud654\ud558\ub294\ub370 \uc0ac\uc6a9\ub41c\ub2e4.<\/p>\n \uc554\ud638\ud654\ub41c \ub370\uc774\ud130\ub294 JOIN\uc774\ub098 SORT \uc791\uc5c5 \uc2dc\uc5d0\ub3c4 \ubcf4\ud638\ub41c\ub2e4. \uc989, JOIN\uc774\ub098 SORT \uc791\uc5c5 \uc2dc temporary \ud14c\uc774\ube14\uc2a4\ud398\uc774\uc2a4\uc5d0 \ub370\uc774\ud130\ub97c \ub0b4\ub824\uc4f0\ub294 \uacbd\uc6b0\uc5d0\ub3c4 \uc554\ud638\ud654\ub418\uc5b4 \uc800\uc7a5\ub41c\ub2e4.<\/p>\n <\/p>\n \ub610\ud55c undo\uc640 redo log \uc5d0\ub3c4 \uc554\ud638\ud654\ub418\uc5b4 \uc800\uc7a5\ub41c\ub2e4.<\/strong><\/p>\n <\/p>\n \ud14c\uc774\ube14\uc2a4\ud398\uc774\uc2a4 \uc554\ud638\ud654\ub97c \uc9c0\uc6d0\ud558\uae30 \uc704\ud574\uc11c \ud14c\uc774\ube14\uc2a4\ud398\uc774\uc2a4\ub97c \uc0dd\uc131\ud558\ub294 CRAETE TABLESPACE \uba85\ub839\uc5b4 \ub4a4\uc5d0 ENCRYPTION \uc808\uc774 \ucd94\uac00\ub418\uc5c8\ub2e4.<\/strong><\/p>\n <\/p>\n ENCRYPTION \uc808\uc5d0 \uc554\ud638\ud654 \uad00\ub828 \uc18d\uc131\ub4e4\uc744 \uae30\uc220\ud558\uba74 \ub41c\ub2e4. \uc790\uc138\ud55c \uba85\ub839\uc5b4\uc640 \uc18d\uc131\ub4e4\uc5d0 \ub300\ud574\uc11c\ub294 \ud14c\uc2a4\ud2b8 \ubd80\ubd84\uc5d0\uc11c \uc54c\uc544\ubcf4\ub3c4\ub85d \ud558\uaca0\ub2e4.<\/p>\n Temporary \ud14c\uc774\ube14\uc2a4\ud398\uc774\uc2a4\uc640 Undo \ud14c\uc774\ube14\uc2a4\ud398\uc774\uc2a4\ub294 \uc554\ud638\ud654\ud560 \uc218 \uc5c6\uc73c\uba70, \ud14c\uc774\ube14\uc2a4\ud398\uc774\uc2a4 \uc554\ud638\ud654\uc758 \uacbd\uc6b0\ub294 \uc554\ud638\ud654 \ud0a4\ub97c \ubcc0\uacbd\ud560 \uc218 \uc5c6\uc73c\ubbc0\ub85c \ud0a4\ub97c \ubcc0\uacbd\ud558\uace0\uc790 \ud558\ub294 \uacbd\uc6b0\uc5d0\ub294 \uc0c8\ub85c\uc6b4 \ud14c\uc774\ube14\uc2a4\ud398\uc774\uc2a4\ub97c \uc0dd\uc131\ud55c \ud6c4 \uac1d\uccb4\ub4e4\uc744 \uc774\ub3d9\uc2dc\ucf1c\uc57c \ud55c\ub2e4.<\/p>\n <\/p>\n Transparent Data Encryption(TDE)\uc758 column-level encryption\uacfc \ub2e4\ub978 \uc810<\/p>\n <\/p>\n \ud14c\uc774\ube14\uc2a4\ud398\uc774\uc2a4 \uc554\ud638\ud654 \uae30\ub2a5\uc740 \uae30\uc874\uc758 \uc5b4\ub5a4 \ud14c\uc774\ube14\uc758 \ud2b9\uc815 \uce7c\ub7fc\ub9cc\uc744 \uc554\ud638\ud654\ud558\ub294 \uae30\ub2a5(TDE)\uacfc\ub294 \ub2ec\ub9ac \ube14\ub85d \uc804\uccb4\ub97c \uc554\ud638\ud654\ud558\ub294 \ube14\ub85d \ub808\ubca8 \uc554\ud638\ud654\ub85c\uc11c \ub514\uc2a4\ud06c\uc5d0 \uae30\ub85d\ub418\ub294 \uc2dc\uc810\uc5d0 \uc554\ud638\ud654\ub418\uace0 \uc77d\ud788\ub294 \uc2dc\uc810\uc5d0 \ubcf5\ud638\ud654\ub418\ub294 \ubc29\uc2dd\uc774\ub2e4.<\/p>\n \uadf8\ub7ec\ubbc0\ub85c \uce7c\ub7fc \ub808\ubca8 \uc554\ud638\ud654\ub294 SGA \uba54\ubaa8\ub9ac \uc0c1\uc758 \ub370\uc774\ud130\ub3c4 \uc554\ud638\ud654\ub41c \uc0c1\ud0dc\ub85c \ub0a8\uc544\uc788\uc5c8\ub358 \ub370 \ubc18\ud574 \ud14c\uc774\ube14\uc2a4\ud398\uc774\uc2a4 \uc554\ud638\ud654\ub294 SGA \uba54\ubaa8\ub9ac \uc0c1\uc758 \ub370\uc774\ud130\ub294 clear text \uc0c1\ud0dc\ub85c \ub0a8\uc544\uc788\uac8c \ub418\uba70, \uc554\ud638\ud654\ub85c \uc778\ud55c \uc624\ubc84\ud5e4\ub4dc\ub294 I\/O \uc791\uc5c5 \uc2dc\uc5d0\ub9cc \ubc1c\uc0dd\ud55c\ub2e4.<\/p>\n TDE\ub294 transportable tablespace\ub97c \uc9c0\uc6d0\ud558\uc9c0 \uc54a\uc9c0\ub9cc \ud14c\uc774\ube14\uc2a4\ud398\uc774\uc2a4 \uc554\ud638\ud654\uc5d0\uc11c\ub294 \uc9c0\uc6d0\ub41c\ub2e4.<\/p>\n \uc18c\uc2a4 \ud50c\ub7ab\ud3fc\uacfc \ub300\uc0c1 \ud50c\ub7ab\ud3fc\uc758 endian\uc774 \ub3d9\uc77c\ud558\uace0, \ub3d9\uc77c\ud55c wallet\uc744 \uc0ac\uc6a9\ud558\ub294 \uacbd\uc6b0\uc5d0\ub294 \ud14c\uc774\ube14\uc2a4\ud398\uc774\uc2a4 \uc554\ud638\ud654\ub97c \uc774\uc6a9\ud558\uc5ec \uc554\ud638\ud654\ud55c \ud14c\uc774\ube14\uc744 transportable tablespace\ub97c \uc774\uc6a9\ud558\uc5ec \uc774\ub3d9\uc2dc\ud0ac \uc218 \uc788\ub2e4.<\/p>\n <\/p>\n <\/p>\n Note : TDE\ub294 \ubbf8\ub514\uc5b4\uc5d0 \uc800\uc7a5\ub41c \ub370\uc774\ud130\uc5d0 \ub300\ud55c \ubcf4\ud638 \uc194\ub8e8\uc158\uc774\ubbc0\ub85c SGA \uba54\ubaa8\ub9ac \uc0c1\uc5d0 clear text\uac00 \ub0a8\ub294 \uac83\uc774 \ubcf4\uc548 \uc815\ucc45\uc5d0 \uc704\ubc30\ub41c\ub2e4\uace0 \ubcfc \uc218\ub294 \uc5c6\uc73c\uba70, temporary \ud14c\uc774\ube14\uc2a4\ud398\uc774\uc2a4\uc5d0 \uae30\ub85d\ub418\ub294 \ub370\uc774\ud130 \ub610\ud55c \ubcf4\ud638\ub418\ub294 \ud2b9\uc9d5\uc744 \ud1b5\ud574 \uc774\ub97c \uc815\ud655\ud558\uac8c \uc900\uc218\ud558\uace0 \uc788\uc74c\uc744 \ud655\uc778\ud560 \uc218 \uc788\ub2e4.<\/p>\n <\/p>\n \uc9c0\uc6d0\ub418\ub294 \ub370\uc774\ud130\ud0c0\uc785<\/p>\n \ubaa8\ub4e0 \ub370\uc774\ud130\ud0c0\uc785\uc744 \uc9c0\uc6d0\ud55c\ub2e4.<\/p>\n \uc9c0\uc6d0\ub418\ub294 \uc554\ud638\ud654 \uc54c\uace0\ub9ac\uc998<\/strong><\/p>\n 3DES168<\/strong><\/p>\n AES128 (default)<\/strong><\/p>\n AES192<\/strong><\/p>\n AES256<\/strong><\/p>\n <\/p>\n \uc81c\uc57d\uc0ac\ud56d\ub4e4<\/p>\n Temporary\uc640 Undo \ud14c\uc774\ube14\uc2a4\ud398\uc774\uc2a4\ub294 \uc554\ud638\ud654\ud560 \uc218 \uc5c6\ub2e4.<\/p>\n Bfile\uc640 External \ud14c\uc774\ube14\uc740 \uc554\ud638\ud654\ud560 \uc218 \uc5c6\ub2e4.<\/p>\n \uc11c\ub85c \ub2e4\ub978 endian\uc744 \uc0ac\uc6a9\ud558\ub294 \ud50c\ub7ab\ud3fc\uac04\uc5d0\ub294 Transportable Tablespace\uc744 \ud1b5\ud574\uc11c \uc554\ud638\ud654\ub41c \ud14c\uc774\ube14\uc2a4\ud398\uc774\uc2a4\ub97c \uc774\ub3d9\uc2dc\ud0ac \uc218 \uc5c6\ub2e4.<\/p>\n <\/p>\n Managing TDE with Enterprise Manager<\/strong><\/p>\n 11g TDE\uc758 \uac00\uc7a5 \ud070 \ud2b9\uc9d5 \uc911\uc758 \ud558\ub098\ub294 Enterprise Manager\ub97c \ud1b5\ud574 \uc124\uc815 \ubc0f \uad00\ub9ac\ub97c \ud560 \uc218 \uc788\uac8c \ub418\uc5c8\ub2e4\ub294 \uc810\uc774\ub2e4.<\/p>\n wallet\uc758 \uc624\ud508\/\ud074\ub85c\uc988, \uc704\uce58 \uc774\ub3d9 \ubc0f \uc0c8\ub85c\uc6b4 \ub9c8\uc2a4\ud130\ud0a4 \uc0dd\uc131 \ub4f1\uc758 \uc791\uc5c5\uc744 Enterprise Manager\ub97c \ud1b5\ud574 \ud560 \uc218 \uc788\uc73c\uba70 \ud14c\uc774\ube14 \ubc0f \ud14c\uc774\ube14\uc2a4\ud398\uc774\uc2a4 \uc0dd\uc131 \uacfc\uc815\uc5d0\uc11c TDE\uad00\ub828 \uc635\uc158\uc744 \uc124\uc815\uc744 \ud560 \uc218 \uc788\ub294 \ud654\uba74\uc774 \uc81c\uacf5\ub41c\ub2e4.<\/p>\n <\/p>\n New Database Features in TDE<\/strong><\/p>\n 11g\ubd80\ud130\ub294 \uc880 \ub354 \ub2e4\uc591\ud55c \ub370\uc774\ud130\ubca0\uc774\uc2a4 \uae30\ub2a5\ub4e4\uc5d0 TDE\ub97c \uc801\uc6a9\ud560 \uc218 \uc788\uac8c \ub418\uc5c8\ub2e4.<\/p>\n <\/p>\n LogMiner<\/strong><\/p>\n TDE\ub97c \uc774\uc6a9\ud574\uc11c \uc554\ud638\ud654 \uce7c\ub7fc\uc758 \ub370\uc774\ud130\ub294 Data File, Undo Segment, Redo Log File\uc5d0 \ubaa8\ub450 \uc554\ud638\ud654\ub41c \uc0c1\ud0dc\ub85c \uc800\uc7a5\ub41c\ub2e4. \ub54c\ubb38\uc5d0 10g\uae4c\uc9c0\ub294 LogMiner\ub97c \uc774\uc6a9\ud574\uc11c Redo log\ub97c \ud655\uc778\ud574\ubcf4\uba74 \uc554\ud638\ud654\ub41c \uce7c\ub7fc\uc758 \ub370\uc774\ud130\ub294 \ud655\uc778\ud560 \uc218 \uc5c6\uc5c8\ub2e4.<\/p>\n \uc608\ub97c \ub4e4\uc5b4, \ub2e4\uc74c\uacfc \uac19\uc774 CUST_PAYMNET_INFO\ud14c\uc774\ube14\uc758 CREDIT_CARD_NUMBER \uce7c\ub7fc\uc774 \uc554\ud638\ud654\ub418\uc5b4\uc788\ub294 \uacbd\uc6b0, 10g\uc5d0\uc11c LogMiner\ub97c \uc774\uc6a9\ud574\uc11c \ub85c\uadf8\ub97c \ud655\uc778\ud574\ubcf4\uba74 \uc554\ud638\ud654\ub41c \uce7c\ub7fc\uc5d0\ub294 \ub2e4\uc74c\uacfc \uac19\uc774 Unsupported Type\uc774\ub77c\ub294 \uba54\uc2dc\uc9c0\ub97c \ud655\uc778\ud560 \uc218 \uc788\uc5c8\ub2e4.<\/p>\n <\/p>\n SQL> select * from user_encrypted_columns;<\/p>\n TABLE_NAME COLUMN_NAME ENCRYPTION_ALG SAL<\/p>\n —————————— —————————— —————————– —<\/p>\n CUST_PAYMENT_INFO CREDIT_CARD_NUMBER AES 192 bits key NO<\/p>\n <\/p>\n SQL> select sql_redo from v$logmnr_contents where table_name = ‘CUST_PAYMENT_INFO’ and operation=’INSERT’;<\/p>\n SQL_REDO<\/p>\n ——————————————————————————–<\/p>\n insert into “OE”.”CUST_PAYMENT_INFO”(“FIRST_NAME”,”LAST_NAME”,”ORDER_NUMBER”,”CR EDIT_CARD_NUMBER”,”ACTIVE_CARD”) values (‘Jon’,’Oldfield’,’10001′,Unsupported Ty pe,’YES’);<\/p>\n <\/p>\n insert into “OE”.”CUST_PAYMENT_INFO”(“FIRST_NAME”,”LAST_NAME”,”ORDER_NUMBER”,”CR EDIT_CARD_NUMBER”,”ACTIVE_CARD”) values (‘Chris’,’White’,’10002′,Unsupported Ty pe,’YES’);<\/p>\n <\/p>\n [10g LogMiner \uc608]<\/p>\n \ud558\uc9c0\ub9cc 11g\ubd80\ud130 LogMiner\ub294 TDE\ub97c \uc9c0\uc6d0\ud55c\ub2e4. 11g\uc5d0\uc11c LogMiner\ub97c \uc774\uc6a9\ud574\uc11c \ub85c\uadf8\ub97c \ud655\uc778\ud574 \ubcf4\uba74 \ub2e4\uc74c\uacfc \uac19\uc774 \uc554\ud638\ud654\ub41c \uce7c\ub7fc\ub3c4 \uadf8 \uac12\uc744 \ud655\uc778\ud560 \uc218 \uc788\ub2e4.<\/p>\n <\/p>\n SQL> select * from user_encrypted_columns;<\/p>\n TABLE_NAME COLUMN_NAME ENCRYPTION_ALG SAL<\/p>\n —————————— —————————— —————————– —<\/p>\n CUST_PAYMENT_INFO CREDIT_CARD_NUMBER AES 192 bits key NO<\/p>\n <\/p>\n SQL> select sql_redo from v$logmnr_contents where table_name = ‘CUST_PAYMENT_INFO’ and operation=’INSERT’;<\/p>\n SQL_REDO<\/p>\n ——————————————————————————–<\/p>\n insert into “OE”.”CUST_PAYMENT_INFO”(“FIRST_NAME”,”LAST_NAME”,”ORDER_NUMBER”,”CR EDIT_CARD_NUMBER”,”ACTIVE_CARD”) values (‘Jon’,’Oldfield’,’10001′,’5446959708812 985′,’YES’);<\/p>\n insert into “OE”.”CUST_PAYMENT_INFO”(“FIRST_NAME”,”LAST_NAME”,”ORDER_NUMBER”,”CR EDIT_CARD_NUMBER”,”ACTIVE_CARD”) values (‘Chris’,’White’,’10002′,’51223580460825 60′,’YES’);<\/p>\n [11g LogMiner \uc608]<\/p>\n \uc704\uc758 \uc608\uc5d0\uc11c\ucc98\ub7fc 11g\ubd80\ud130 LogMiner\ub294 DML \ubb38\uc7a5\uc5d0 \ud3ec\ud568\ub418\uc5b4\uc788\ub294 \uc554\ud638\ud654\ub41c \uce7c\ub7fc\uc758 \ub370\uc774\ud130\ub97c clear text \ud615\ud0dc\ub85c V$LOGMNR_CONTENTS\uc5d0 \uc800\uc7a5\ud55c\ub2e4. LogMiner\uac00 \ub370\uc774\ud130\ub97c \ubcf5\ud638\ud654\ud574\uc11c V$LOGMNR_CONTENTS\uc5d0 \uc800\uc7a5\ud558\uae30 \uc704\ud574\uc11c\ub294 \ubb3c\ub860 \ub300\uc0c1 \ud14c\uc774\ube14\uc758 \ub9c8\uc2a4\ud130\ud0a4\uac00 \ub4e4\uc5b4\uc788\ub294 wallet\uc774 \uc624\ud508\ub418\uc5b4 \uc788\ub294 \uc0c1\ud0dc\uc774\uc5b4\uc57c\ub9cc \ud55c\ub2e4.<\/p>\n Note : TDE\ub294 access control\uc744 \uc704\ud55c \uc194\ub8e8\uc158\uc774 \uc544\ub2cc \ud30c\uc77c \ub808\ubca8\uc5d0 \ub300\ud55c \uc554\ud638\ud654 \uc194\ub8e8\uc158\uc774\uae30 \ub54c\ubb38\uc5d0 V$LOGMNR_CONTENTS\uc5d0 clear text\uac00 \uc800\uc7a5\ub418\ub294 \uac83\uc774 \ubcf4\uc548 \uc815\ucc45\uc5d0 \uc704\ubc30\ub418\ub294 \uac83\uc774 \uc544\ub2d8\uc5d0 \uc8fc\uc758\ud55c\ub2e4.<\/p>\n <\/p>\n Logical Standby<\/strong><\/p>\n Logical Standby\ub294 LogMiner\ub97c \uc774\uc6a9\ud574\uc11c Redo Log\ub97c SQL\ubb38\uc7a5\uc73c\ub85c \ubcc0\ud658\ud574\uc11c Standby \ub370\uc774\ud130\ubca0\uc774\uc2a4\uc5d0 \uc801\uc6a9\ud558\ub294 SQL Apply\ub97c \uad6c\ud604\ud558\ubbc0\ub85c, 11g\ubd80\ud130 LogMiner\uac00 TDE \uc9c0\uc6d0\ud558\uac8c \ub418\uba74\uc11c \uc790\ub3d9\uc801\uc73c\ub85c Logical Standby\ub3c4 TDE\ub97c \uc9c0\uc6d0\ud558\uac8c \ub418\uc5c8\ub2e4.<\/p>\n Primary\uc640 standby \ub370\uc774\ud130\ubca0\uc774\uc2a4\uac00 \uac19\uc740 \ub9c8\uc2a4\ud130 \ud0a4\ub97c \uc0ac\uc6a9\ud558\ub3c4\ub85d, \ubc18\ub4dc\uc2dc primary \ub370\uc774\ud130\ubca0\uc774\uc2a4\uc758 wallet\uc744 standby \ub370\uc774\ud130\ubca0\uc774\uc2a4\uc5d0 copy\ud574\uc11c \uc0ac\uc6a9\ud574\uc57c \ud55c\ub2e4.<\/p>\n \ub9c8\uc2a4\ud130\ud0a4 re-generation \uba85\ub839\uc5b4\ub294 replicate\ub418\uc9c0 \uc54a\uc73c\ubbc0\ub85c primary \ub370\uc774\ud130\ubca0\uc774\uc2a4\uc5d0\uc11c \ub9c8\uc2a4\ud130 \ud0a4\ub97c re-generation\ud560 \ub54c \ub9c8\ub2e4 \ubc18\ub4dc\uc2dc wallet\uc744 standby \ub370\uc774\ud130\ubca0\uc774\uc2a4\uc5d0 \ub2e4\uc2dc copy\ud574 \uc8fc\uc5b4\uc57c \ud568\uc5d0 \uc8fc\uc758\ud55c\ub2e4.<\/p>\n Standby \ub370\uc774\ud130\ubca0\uc774\uc2a4\uc5d0\uc11c\ub294 \ub9c8\uc2a4\ud130 \ud0a4 re-generation \uba85\ub839\uc5b4\ub97c \uc218\ud589\ud560 \uc218 \uc5c6\ub2e4.<\/p>\n Standby \ub370\uc774\ud130\ubca0\uc774\uc2a4\uc5d0\uc11c\ub9cc copy\ud574\uc628 wallet\uc758 \ube44\ubc00\ubc88\ud638\ub97c \ubcc0\uacbd\ud558\uac70\ub098, standby \ub370\uc774\ud130\ubca0\uc774\uc2a4\uc758 \uce7c\ub7fc \ud0a4\ub97c rekey \ud558\ub294 \uac83\uc740 \uac00\ub2a5\ud558\ub2e4.<\/p>\n <\/p>\n Streams<\/strong><\/p>\n 11g\ubd80\ud130\ub294 Streams\ub3c4 TDE\ub97c \uc9c0\uc6d0\ud55c\ub2e4.<\/p>\n TDE\ub85c \uc554\ud638\ud654\ub41c \uce7c\ub7fc\uc758 \ub370\uc774\ud130\ub294 \ud22c\uba85\ud558\uac8c \ubcf5\ud638\ud654\ub418\uc5b4 Streams\uc758 Filtering\uacfc \uae30\ud0c0 \uacfc\uc815\uc744 \uac70\uce5c\ub2e4. Apply \ub370\uc774\ud130\ubca0\uc774\uc2a4\uac00 TDE\ub97c \uc0ac\uc6a9\ud55c\ub2e4\uba74, \uc801\uc6a9\ub420 \ub370\uc774\ud130\ub294 \ub85c\uceec\uc758 \uc554\ud638\ud654 \ud0a4\ub97c \uc0ac\uc6a9\ud558\uc5ec \ud22c\uba85\ud558\uac8c \ub2e4\uc2dc \uc554\ud638\ud654\ub418\uc5b4 \uc801\uc6a9\ub41c\ub2e4.<\/p>\n Source \ub370\uc774\ud130\ubca0\uc774\uc2a4\uc758 \uc77c\ubd80 \uce7c\ub7fc\uc774 \uc554\ud638\ud654\ub418\uc5b4 \uc788\ub294\ub370 apply \ub370\uc774\ud130\ubca0\uc774\uc2a4\uc758 \ud574\ub2f9 \uce7c\ub7fc\ub4e4\uc740 \uc554\ud638\ud654\ub418\uc5b4 \uc788\uc9c0 \uc54a\ub2e4\uba74 \uc801\uc6a9 \uacfc\uc815\uc5d0\uc11c \uc5d0\ub7ec\uac00 \ubc1c\uc0dd\ud55c\ub2e4. ENFORCE_ENCRYPTION\uc774 FALSE\ub85c \uc124\uc815\ub418\uc5b4 \uc788\ub294 \uacbd\uc6b0\uc5d0\ub9cc \uc5d0\ub7ec\uac00 \ubc1c\uc0dd\ud558\uc9c0 \uc54a\ub294\ub2e4.<\/p>\n <\/p>\n Hardware Security Module<\/strong><\/p>\n Hardware Security Module(HSM)\uc774\ub780 \uc554\ud638\ud654 \ud0a4\ub97c \uc800\uc7a5\ud558\uae30 \uc704\ud55c secure storage\uc778 \ubb3c\ub9ac\uc801 \uc7a5\uce58\ub97c \uc758\ubbf8\ud55c\ub2e4.<\/p>\n \ub610\ud55c HSM\uc740 \uc554\ud638\ud654 \ubcf5\ud638\ud654 \uc791\uc5c5\uc744 \uc704\ud55c \uba54\ubaa8\ub9ac\ub3c4 \uc81c\uacf5\ud558\uae30 \ub54c\ubb38\uc5d0 \uc624\ub77c\ud074 wallet\ubcf4\ub2e4 \uc880 \ub354 \uac15\ub825\ud55c \ubcf4\uc548\uc131\uc744 \ubcf4\uc7a5\ud55c\ub2e4.<\/p>\n TDE \uae30\ub2a5\uc744 HSM\uc744 \uc774\uc6a9\ud574\uc11c \uad6c\ud604\ud558\uba74, TDE\ub97c \uc704\ud55c \ub9c8\uc2a4\ud130 \ud0a4\uac00 HSM\ub0b4\uc5d0 \uc800\uc7a5\ub418\uace0, \ub9c8\uc2a4\ud130 \ud0a4\ub97c \uc774\uc6a9\ud55c \uc554\ud638\ud654\/\ubcf5\ud638\ud654 \uc791\uc5c5\uc740 \ubaa8\ub450 HSM\ub0b4\uc758 \uba54\ubaa8\ub9ac \uc0c1\uc5d0\uc11c \uc774\ub8e8\uc5b4\uc9c0\uae30 \ub54c\ubb38\uc5d0 \ub9c8\uc2a4\ud130 \ud0a4\ub97c \ubcf4\ud638\ub418\uc9c0 \uc54a\ub294 \uba54\ubaa8\ub9ac \uc0c1\uc5d0 \ub178\ucd9c\uc2dc\ud0a4\uc9c0 \uc54a\ub294\ub2e4\ub294 \uc7a5\uc810\uc774 \uc788\ub2e4.<\/p>\n \uc5ec\ub7ec vendor\uc5d0\uc11c HSM\uc744 \uc81c\uacf5\ud558\uace0 \uc788\uc73c\uba70, \ub77c\uc774\ube0c\ub7ec\ub9ac\ub97c \uc81c\uacf5\ud558\ub294 Vendor\uc758 HSM\uc744 \uc0ac\uc6a9\ud560 \uc218 \uc788\ub2e4.<\/p>\n <\/p>\n Hardware Security Module\u00a0<\/strong><\/p>\n <\/p>\n Database Server Encrypted Data<\/strong><\/p>\n \uadf8\ub9bc 2 Hardware Security Module \uac1c\uc694<\/p>\n <\/p>\n <\/p>\n \ud14c\uc2a4\ud2b8<\/p>\n Quick Implementation of Tablespace Encryption 1.) Wallet \uc0dd\uc131 \uc704\uce58 \uc9c0\uc815<\/p>\n <\/p>\n Wallet\uc744 \uc0dd\uc131\ud558\uae30 \uc704\ud574\uc11c\ub294 $ORACLE_HOME\/network\/admin \ub514\ub809\ud1a0\ub9ac\uc5d0 \uc788\ub294 sqlnet.ora \ud30c\uc77c \ub0b4\uc5d0 \ud30c\ub77c\ubbf8\ud130 ENCRYPTION_WALLET_LOCATION\uc744 \uc9c0\uc815\ud574\uc57c \ud55c\ub2e4.<\/p>\n Wallet\uc774 \uc0dd\uc131\ub420 \uc704\uce58\ub97c \uc9c0\uc2dc\ud558\ub294 \ud30c\ub77c\ubbf8\ud130\ub85c\uc11c \uc124\uc815\ub418\uc5b4\uc788\uc9c0 \uc54a\uc73c\uba74 \ub514\ud3f4\ud2b8\ub85c \/etc\/ORACLE\/WALLETS\/<Oracle software owner OS user name> \uc744 wallet \uc0dd\uc131 \uc704\uce58\ub85c \uc0ac\uc6a9\ud55c\ub2e4.<\/p>\n <\/p>\n oracle@obe11g.us.oracle.com:\/home\/oracle><\/p>\n $ cd $ORACLE_HOME\/network\/admin<\/p>\n oracle@obe11g.us.oracle.com:\/u01\/app\/oracle\/product\/11.1.0\/db_1\/network\/admin><\/p>\n <\/p>\n $ vi sqlnet.ora<\/p>\n ENCRYPTION_WALLET_LOCATION=<\/p>\n (SOURCE=(METHOD=FILE)(METHOD_DATA=(DIRECTORY=\/u01\/app\/oracle\/product\/11.1.0\/db_1)))<\/p>\n <\/p>\n 2.) Wallet \uc0dd\uc131<\/p>\n \ub2e4\uc74c \uba85\ub839\uc5b4\ub97c \ud1b5\ud574 wallet\uc5d0 \ube44\ubc00\ubc88\ud638\ub97c \uc9c0\uc815\ud558\uace0 TDE\uc5d0 \uc0ac\uc6a9\ud560 \ub9c8\uc2a4\ud130 \ud0a4\ub97c \uc0dd\uc131\ud55c\ub2e4.<\/p>\n <\/p>\n SQL> connect \/ as sysdba<\/p>\n Connected.<\/p>\n SQL> alter system set encryption key identified by “welcome1”;<\/p>\n <\/p>\n Note : \uc704 \uba85\ub839\uc5b4\ub294 wallet\uc5d0 TDE\uc6a9 \ub9c8\uc2a4\ud130 \ud0a4\ub97c \uc0dd\uc131\ud558\ub294 \uba85\ub839\uc5b4\uc774\ub2e4. Wallet\uc5d0 \uc774\ubbf8 \ub9c8\uc2a4\ud130 \ud0a4\uac00 \uc0dd\uc131\ub418\uc5b4 \uc788\ub2e4\uba74 \uc0c8\ub85c\uc6b4 \ub9c8\uc2a4\ud130 \ud0a4\ub97c \ucd94\uac00\ud55c\ub2e4.<\/p>\n \uc0c8\ub85c\uc6b4 \ud0a4\ub97c \ucd94\uac00\ud558\uc9c0 \uc54a\uace0, \ub370\uc774\ud130\ubca0\uc774\uc2a4 shutdown \ub4f1\uc758 \uc774\uc720\ub85c close\ub418\uc5c8\ub358 wallet\uc744 \ub2e4\uc2dc \uc624\ud508\ub9cc \ud558\uace0 \uc2f6\ub2e4\uba74 \ub2e4\uc74c\uc758 \uba85\ub839\uc5b4\ub97c \uc0ac\uc6a9\ud55c\ub2e4.<\/p>\n <\/p>\n Alter system set wallet open identified by \u201cwelcome1\u201d;<\/p>\n <\/p>\n <\/p>\n 23.) CLEAN_TABLE \uc0dd\uc131<\/p>\n \uc704\uc5d0\uc11c \uc0dd\uc131\ud55c CLEAN \ud14c\uc774\ube14\uc2a4\ud398\uc774\uc2a4\uc5d0 \uc544\ub798\uc640 \uac19\uc774 \ud14c\uc774\ube14\uc744 \uc0dd\uc131\ud55c\ub2e4.<\/p>\n <\/p>\n SQL> connect oe\/oe;<\/p>\n Connected.<\/p>\n SQL> CREATE TABLE oe.clean_table TABLESPACE clean AS SELECT * FROM oe.customers;<\/p>\n Table created.<\/p>\n <\/p>\n 24.) TDE_TABLE \uc0dd\uc131<\/p>\n \uc704\uc5d0\uc11c \uc0dd\uc131\ud55c \uc554\ud638\ud654\ub41c \ud14c\uc774\ube14\uc2a4\ud398\uc774\uc2a4\uc778 TDE\uc5d0 \uc544\ub798\uc640 \uac19\uc774 \ud14c\uc774\ube14\uc744 \uc0dd\uc131\ud55c\ub2e4.<\/p>\n <\/p>\n SQL> CREATE TABLE oe.tde_table TABLESPACE tde AS SELECT * FROM oe.customers;<\/p>\n Table created.<\/p>\n <\/p>\n 25.) \ub370\uc774\ud130\ud30c\uc77c\uc744 \uc5f4\uc5b4\ubcf4\uba74, \ub2e4\uc74c\uacfc \uac19\uc774 TDE \ud14c\uc774\ube14\uc2a4\ud398\uc774\uc2a4\uc5d0\ub294 \ub370\uc774\ud130\uac00 \uc554\ud638\ud654\ub418\uc5b4 \uc800\uc7a5\ub418\uace0, CLEAN \ud14c\uc774\ube14\uc2a4\ud398\uc774\uc2a4\uc5d0\ub294 clean text\uac00 \uc800\uc7a5\ub41c \uac83\uc744 \ud655\uc778\ud560 \uc218 \uc788\ub2e4.<\/strong><\/span><\/p>\n <\/p>\n <clean \ub370\uc774\ud130 \ud30c\uc77c><\/p>\n<\/a><\/p>\n<\/a><\/p>\n<\/a><\/p>\n<\/a><\/a><\/p>\n<\/a><\/a><\/a><\/a><\/a><\/a><\/a><\/a><\/a><\/a><\/p>\n<\/a><\/a><\/p>\n<\/a><\/p>\n