IT Brief New Zealand logo
Technology news for New Zealand's largest enterprises
Story image

Oracle enhances cloud security with integrated threat management

By Shannon Williams
Wed 1 Jun 2022

Oracle is expanding the built-in security services and capabilities of Oracle Cloud Infrastructure to help customers protect their cloud applications and data against emerging threats. 

Five new capabilities round out OCIs already comprehensive security offering, including a new built-in and cloud-native firewall service and enhancements to Oracle Cloud Guard and Oracle Security Zones. These innovations will further help ensure that organisations can easily secure their cloud deployments and applications with simple, prescriptive, and integrated services that in most cases, do not require additional investment. 

As organisations across industries, from financial services to retail, move mission-critical workloads to the cloud, they must defend against security vulnerabilities from inside and outside the firewall that are resulting in more breaches and exposed data. For example, highlighting threats that originate from inside a company, Gartner estimates that through 2023, at least 99 percent of cloud security failures will be the customers fault. To overcome this challenge, cloud users and administrators are now expected to know how cloud security services work, configure them correctly, and maintain their cloud deployments.

"Organisations are just as confident critical applications and data can be safely hosted in a cloud environment as they are on-premises," says Jay Bretzmann, security program director, IDC.

"So, the question becomes one of best fit; OCIs cloud infrastructure design and new security services are very purposeful and prescriptive based on the hindsight of other cloud options in the market and complexities and lack of automation other providers customers encounter," he says.

"Oracle has now made cloud security easy to consume and affordable for its customers."

New OCI Security Innovations

Oracle has made security foundational and built-in for OCI customers to help them address regulatory compliance requirements, stay on top of security threats and concerns, and prevent security-related outages. Oracle is expanding its cloud security capabilities to provide multiple layers of defense to help identify and defeat emerging threats and security violations quickly. 

New capabilities include: 

OCI Network Firewall: Provides centralised protection against cyberattacks across OCI with a new cloud-native, managed firewall service that is powered by industry-leading Palo Alto Networks VM-Series Next-Generation Firewall technology (NGFW). The firewall provides security controls, threat prevention, and mitigation features, including custom URL filtering, intrusion prevention and detection (IDS/IPS), and TLS inspection for inbound, outbound, and lateral traffic to customer workloads hosted on OCI. With OCI Network Firewall, customers can quickly turn on and secure their applications and cloud environment with firewall features and scale their security across their cloud deployment. OCI Network Firewall is available as a turn-key offering to enable customers to immediately take advantage of the firewall without the need to configure and manage additional security infrastructure. 

Oracle Threat Intelligence Service: Aggregates threat intelligence data across different sources and manages this data to provide actionable guidance for threat detection and prevention in Oracle Cloud Guard and other OCI services. This service provides insights from Oracles own unique telemetry, open source feeds such as abuse.ch and Tor exit relays, and third-party partners, such as CrowdStrike.

Oracle Cloud Guard Threat Detector: Identifies misconfigured resources, insecure activity across customer environments, and potential malicious threat activities. It provides security administrators with the visibility to triage and resolve cloud security issues. Security inconsistencies can be remediated automatically with out-of-the-box Cloud Guard security recipes to effectively scale the security operations centre.

Oracle Security Zones: Expands Oracle Security Zones with support for customer-defined policy sets and integrated security posture monitoring with Cloud Guard. Now customers can create custom security zone policy sets to prevent actions that could weaken a customers security posture. Security Zone policies can be applied to various cloud infrastructure types (e.g., network, compute, storage, database, etc.) to ensure cloud resources stay secure and prevent security misconfigurations. Users determine which policies are appropriate for their needs by defining custom security zone policy sets. OCI enforces Security Zone policies as an integrated platform feature that supports a growing number of adjacent OCI Security services. In contrast to IAM permissions, which are associated with people, Security Zone policies act as security guardrails for resources and define allowable configurations.

Oracle Cloud Guard Fusion Applications Detector: Extends Oracle Cloud Guard beyond cloud security posture management for OCI to also monitor Oracle Fusion Cloud Applications and provide customers with a consolidated view of security policies. Available first for Oracle Fusion Cloud Human Capital Management and Oracle Fusion Cloud Enterprise Resource Planning, Oracle Cloud Guard Fusion Applications Detector provides pre-configured and customised configurations or recipes to monitor potential security violations in the applications. Detectors trigger alerts on sensitive configuration changes related to user privileges that impact important data access, including adding, deleting, or modifying data and function privileges for roles and users, as well as changes to sensitive objects.  

"Oracle has decades of experience guiding customers to secure their valuable data and applications in the cloud and on-premises," says Mahesh Thiagarajan, senior vice president, Security and Developer Services, Oracle Cloud Infrastructure. 

"With OCI Network Firewall, powered by industry-leading Palo Alto Networks, we are bringing the ecosystem closer to the platform," he says. 

"These latest innovations, combined with our existing offerings, provide organisations with a comprehensive set of cloud security services that lower the barrier to secure customer cloud environments and help them more easily identify potential vulnerabilities."

Related stories
Top stories
Story image
Tech job moves
Tech job moves - ARMA International, Avec, Komo & YouGov
We round up all job appointments from August 15-18, 2022, in one place to keep you updated with the latest from across the tech industries.
Story image
Microsoft
CCL launches Managed M365 offering for NZ work environments
CCL, the cloud specialist within Spark Business Group, has recently launched its Managed M365 offering.
Story image
Update
InterSystems releases updates to its IRIS data platform
Provider of next-generation solutions InterSystems has announced a series of new releases to its award-winning InterSystems IRIS data platform.
Story image
Cloud Security
Organisations struggling to secure new cloud environments
“In the wake of COVID-19, organisations substantially accelerated their digital transformation initiatives to accommodate a remote workforce."
Story image
Cloud
Microsoft accelerating NZ tech sector with new data centres
Microsoft’s forthcoming New Zealand data centres are introducing hyperscale public cloud capabilities on a scale previously unseen in the country.
Story image
LawVu
Exclusive: LawVu streamlines the in-house legal struggle
LawVu is a New Zealand-born company successfully transforming the in-house legal industry with its category-defining workspace.
Story image
Mobility
Micro-mobility companies caught at a crossroads - study
Reformulating models, operations and goals, shared micro-mobility companies can tap into a market worth US$9 billion in ride revenues in 2030.
Story image
SaaS
Cloudera launches all-in-one data lakehouse cloud service
CDP One makes it faster, easier and less risky for businesses to move to the cloud and migrate existing workloads to a modern data architecture.
Story image
Unified Communications
MAXHUB reveals latest innovations for ANZ at Integrate 2022 in Sydney
Some of the most exciting and innovative updates from this year's Integrate 2022 event have come from the leaders at MAXHUB.
Story image
Artificial Intelligence
Concentric AI protects sensitive data with new capabilities
The new capability reveals sensitive data shared across email and business messaging platforms and highlights who has inappropriate access to content.
Story image
Cybersecurity
‘Windows shops’ target admin rights to de-risk their environments
New data shows up to 75% of critical vulnerabilities could be mitigated through a rights and privileges crackdown
Story image
Blockchain
Australian Grand Prix uses CENNZnet blockchain for fan experience
CENNZnet was employed by Power'd Digital to deliver the Formula 1 Heineken Australian Grand Prix's 2022 AusGP Access program.
Story image
Digital Transformation
Federated change is the best path to digital evolution
Businesses that can successfully manage the exponentially expanding masses of data produced by modern consumers will be the businesses that survive and prosper.
Story image
Mobiles
Demand grows for future-proof mobile access solutions
HID Global, in partnership with IFSEC Global, recently released the 2022 State of Physical Access Control report for the fourth year running.
Story image
Banking
Virgin Money works with 9Spokes to create custom offering
Virgin Money has worked with Kiwi SaaS 9Spokes to build a custom version of its business dashboard offering, M-Track, to generate stronger insights for the bank and its customers.
Story image
Cloud
Whispir reports significant revenue growth as CaaS market expands
Australian cloud platform Whispir has announced its financial results, reporting significant growth as it continues to introduce new Communications-as-a Service (CaaS) offerings to the market.
Story image
5G
Worldwide 5G mobile data traffic exploding - report
"With 5G, there is a wider range of deployment scenarios, forcing vendors to provide comprehensive solutions to support every need."
Story image
Email scams
HelpSystems shines light on impact of response-based threats
Response-based attacks targeting corporate inboxes have climbed to their highest volume since 2020, representing 41% of all email-based scams.
AWS Marketplace
Learn how security orchestration, automation, and response (SOAR) enhances your security strategy.
Link image
Story image
MarTech
CM Group recognised as Best Overall MarTech Company
MarTech Breakthrough has ranked CM Group as the Best Overall MarTech Company for the third year running and Cheetah Digital as Best Overall Marketing Campaign Management Solution.
Story image
Customer experience
Exclusive: How Accenture is changing the customer experience game
Creating highly personalised real-world customer experiences using API, near-field communication, and spatial technology is about taking a traditional experience and elevating the customer journey into a digital world.
Story image
Hybrid Cloud
The essential guide to digital transformation by SolarWinds
Digital transformation is a buzzword thrown around all the time by companies, but what does it actually mean and why is it important? SolarWinds breaks it down.
Story image
IDC
Collaboration app market revenue grows 28.4% year-over-year
IDC has found that global revenues in the collaboration applications market grew 28.4% year-over-year in 2021 to $29.1 billion.
Story image
Data Protection
Safeguarding your financial data
As the digital revolution marches on, managing data security has never been more important. Here are five important steps to take toward better financial data security.
Story image
Radware
DDoS activity rises dramatically - Radware report
The first six months of 2022 were marked by a significant increase in DDoS activity across the globe, according to a new report.
Story image
Gartner Magic Quadrant
Spryker named Gartner Visionary in 2022 Magic Quadrant for Digital Commerce
Spyker has announced it has been recognised by Gartner as a Visionary in the 2022 Magic Quadrant for Digital Commerce.
Story image
Cryptocurrency
Crypto crime: Illicit activity falls with rest of market
Cryptocurrency scams, which typically present themselves as passive crypto investing opportunities, are less enticing to potential victims.
Story image
Cybersecurity
Verizon supports Fujifilm's cybersecurity advancements
Verizon Business is supporting Japan’s Fujifilm Holdings to strengthen its global cybersecurity monitoring and cyber intelligence capabilities.
Story image
Solutions
Ivanti reveals potential ROI of 261% for Endpoint Management Solution
Ivanti has announced the results of a commissioned Total Economic Impact (TEI) study conducted by Forrester Consulting.
Story image
Data
Workday research finds A/NZ organisations becoming leaders in digital agility
New research from Workday and IDC has revealed that Australia and New Zealand are becoming leaders in digital agility.
Story image
Facial recognition
Benefits vs risks of facial recognition technology
Once a distant, futuristic concept, facial recognition technology is now found in many technological applications with a variety of different functions. 
Story image
Collaboration
Schneider Electric launches Connected Services with Claroty
Schneider Electric is teaming up with Claroty to assist in maintaining cybersecurity for physical assets - a critical issue.
Story image
Mobility
Cradlepoint launches architectural extension of NetCloud solution
With this latest release Cradlepoint is focused on helping lean IT organisations with advanced SD-WAN and zero trust capabilities.
Story image
Microsoft
8x more users attacked via old Microsoft Office vulnerability in Q2
"Criminals craft malicious documents and convince their victims to open them through social engineering techniques."
Story image
Business Intelligence / BI
TIBCO ranks highly in 2022 business intelligence study
Dresner Advisory Services has recognised TIBCO as a Service Leader and a Credibility Leader in Business Intelligence in the 2022 Wisdom of Crowds Business Intelligence Market Study.
Story image
Innovation
Arcion extends data replication platform with new capabilities
"Arcion is committed to investing in continuous innovation. Our goal is to be the first choice in whole-product solutions for large-scale data replication."
Story image
Cyber resilience
NZ’s Cyber Resilience Framework to be evolving and potentially automated
The government's already putting $2.4 million into the Cyber Resilience Framework in its initial stages, what is it and why is it important?
Story image
Sustainability
CDC hyperscale data centres now open in New Zealand
CDC Data Centres (CDC) says two new, state-of-the-art hyperscale data centres are now open for business in Auckland.
Story image
Cybersecurity
CISOs need to consider a risk-based cybersecurity strategy
Rather than talking in terms of attack vectors and vulnerabilities, CISOs and security decision-makers must look at actual business risk.
Story image
Contact Centre
Treasure Data launches new customer experience functionality
Treasure Data has introduced a new strategic vision and product positioning for Customer Data Cloud, reflecting the company's focus.
Story image
Environment
Lenovo launches CO2 Offset Service for SMBs across A/NZ
Lenovo has announced the rollout of a new, first-of-its-kind CO2 Offset Service for SMBs across Australia and New Zealand. 
Story image
Storage
On-premise micro data centres an emerging option for storage
Digital transformation is occurring in all industries, resulting in unprecedented amounts of data. Explore the option of storing your information on-site using micro data centres.