Hi

It isn't possible to hide the structure of the database successfully, as
your customers DBA will access the database and can query its structure
- tables, indexes, constraints etc from the dictionary and work out how
quite a lot of your tables interact. That said if you want to make it
difficult then obfuscate all the table names, index names etc, i.e.
don't use a table called EMPLOYEE_SALARIES use a table called say HH1.
Do not name columns where there is a join with the same name in two
different tables. ensure you wrap any PL/SQL and make sure your
applications source cannot be read. To make it harder to infer joins
between tables don't implement constraints in the database do it in the
application (bad). 

Anyone with some little effort should be able to construct an entity
diagram either manually or using a tool. You cannot wrap views so joins
can be extrapolated from those, also setting trace in the database or
SQL*Net trace for a period of time and use of your application would
extract enough SQL to give someone a good idea of how your entity
relationships work..

I think you are wasting your time to try and hide the database
structure!

hth

kind regards

Pete
-- 
Pete Finnigan
email:[EMAIL PROTECTED]
Web site: http://www.petefinnigan.com - Oracle security audit specialists
Book:Oracle security step-by-step Guide - see http://store.sans.org for details.

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Pete Finnigan
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Reply via email to