IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Hardware & Software Remarks
____________________________________________________________________ .........................................
Example:
In an Oracle database, every table is assigned a fixed number of extents. In
Oracle terminology, Extent designates a logical unit of magnitude. The data of
a table are stored in at least one extent. Once the capacity of an extent has
been exhausted, the database management system automatically creates
another extent. The following values can be defined during the creation of a
table:
- Size of the first extent in bytes
- Size of the second extent in bytes
- Percentage growth of all additional extents, relative to the size of the
second extent
- Maximum number of extents which can be created for a table
- The PCTFREE parameter is used to reserve any required percentage of the
new blocks for later modifications.
Regular checks must also be made as to whether the data volume is actually
increasing at the originally assumed rate. If it increases more slowly, memory
resources which could be used for other purposes are tied down unnecessarily.
If it increases more quickly, bottlenecks in the memory capacity might occur.
Furthermore, the degree of utilisation of the database must be checked
regularly, particularly as regards the set upper limits (refer to S 4.73
Specifying upper limits for selectable data records).
The information of relevance to the actual monitoring of a database depends
on its mode of operation, i.e. the standard database software in use.
Accordingly, individual measures must also be implemented to so modify the
database configuration that it meets requirements concerning access speeds,
intended transactions etc.
Scripts can be used to automate monitoring of the database. However, a
prerequisite here is that the database software supplies the information in a
form which can be analysed automatically.
Additional controls:
- Are database files, important tables and the utilisation of the database
checked regularly?
- Have appropriate monitoring intervals been defined?
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000