Today’s Audit Challenges

Introduction to Oracle Fusion Middleware Audit Framework 11-7 7. Reports can also be generated from the audit data using Oracle BI Publisher. A set of pre-defined reports are available. See Chapter 13, Using Audit Analysis and Reporting . Application Behavior in Case of Audit Failure It is important to note that an application does not stop execution if it is unable to record an audit event for any reason.

11.3.2 Key Technical Concepts

This section introduces key concepts in the Oracle Fusion Middleware Audit Framework. Audit-Aware Components The term audit-aware refers to components that are integrated with the Oracle Fusion Middleware Audit Framework so that audit policies can be configured and events can be audited for those components. Oracle Internet Directory is an example of an audit-aware component. Stand-alone applications can be integrate d with the Oracle Fusion Middleware Audit Framework through configuration with the jps-config.xml file. Audit Policy An audit policy is a declaration of the type of events to be captured by the audit framework for a particular component. For Java components, the audit policy is defined at the domain level. For system components, the audit policy is managed at the component instance level. Oracle Fusion Middleware Audit Framework provides several pre-defined policy types: ■ None ■ Low audits fewer events, definition is component-dependent ■ Medium audits many events, definition is component-dependent ■ Custom implements filters to narrow the scope of audited events Audit Policy Component Type This refers to the component type to be audited; for example, Oracle Internet Directory is a source of auditable events during authentication. For lists of the events that can be audited for each component, see Section C.1, Audit Events . Event Filters Certain audit events implement filters to control when the event is logged. For example, a successful login event for the Oracle Internet Directory component may be filtered for specific users. For details, see Section 12.3, Managing Audit Policies . Oracle Platform Security Services Oracle Platform Security Services, a key component of the Oracle Fusion Middleware 11g, is the Oracle Fusion Middleware security implementation for Java features such as Java Authentication and Authorization Service JAAS and Java EE security.