Leveraging Oracle Solaris Security and Performance ...

1 Copyright 2017, Oracle and/or its affiliates. All rights reserved. | Leveraging Oracle Solaris Security and Performance Benefits in Oracle cloud [GEN7018]Bill NesheimVP, Oracle Solaris EngineeringOctober 2, 2017 Copyright 2017, Oracle and/or its affiliates. All rights reserved. |Safe Harbor StatementThe following is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described for Oracle s products remains at the sole discretion of 2017, Oracle and/or its affiliates.

2 All rights reserved. | Solaris Product DirectionContinuous Delivery of Security , Stability and Software EnhancementsSeamless Upgrades Enable Agile Incorporation of New Capabilities with Guaranteed Compatibility for 1,000 s of Oracle , ISV, and Customer ApplicationsSmallerMoreFrequentLessDisru ptiveQuickerSimplerSolarisContinuous Delivery ModelHigh RiskComplex DisruptiveLegacyMajor Releases Slow AdoptionSlow and Expensive Re-QualificationsCopyright 2017, Oracle and/or its affiliates. All rights reserved. |Yo u r s e c u re fo u n d a t i o n fo r c l o u d-ready enterprise UNIX innovationOracle Solaris 11 HW based application protection Time and role based access managementImmutable VMs; integrated compliance validationEngineered for Oracle DB & Enterprise ApplicationsZero-Overhead, Secure VirtualizationExtreme Scalability1-Step network based update & rollbackContinuous deliveryBuilt in migration, archival and recovery toolsOne OS, any cloud1000 s of applicationsApplication Binary GuaranteeCopyright 2017, Oracle and/or its affiliates.

3 All rights reserved. |Our commitment to approachable innovationT4T5,M5, M6M7S7M8 ASLRS vcbundlePer user ZonesPTPDAX, SSM,Compliance reportingPF, KMIPM ulti-factor authenticationMuchmore to come! .. Solaris 1120112012201320142015201620172018201920 207+ years and counting of seamless innovation delivery # pkgupdateSolaris Binary Compatibility protects your application software investmentCopyright 2017, Oracle and/or its affiliates. All rights reserved. | Solaris Continuous Delivery Security KMIP Multi-factor authentication SSM enhancements Package signing enhancements MIT Kerberos V5 update -> Oracle Database Integration OIC for Database eXtendedReliable Connected Transport Platform SPARC M8, Fujitsu SPARC Athena++ Intel Skylake Broadcom 25Gb, Intel 10 GbE Ethernet DAX APIs for SPARC M7, M8 Diagnose-ability & Maintain-ability Fast SRIOV I/O failover SCSI tracing Watchpointsvia SSMNew capabilities delivered in recent SRUsCopyright 2017, Oracle and/or its affiliates.

4 All rights reserved. |]Three Pillars of Cyber SecurityCopyright 2017, Oracle and/or its affiliates. All rights reserved. | Solaris prevents abuse or misuse of credentialsMulti-Factor AuthenticationStandards-based One-Time Password and Smart Card supportControlled System AccessLeast privilege model with time, role and file based authorization limitsRemote Auditing, Logging and AlertingPer-object auditing; tamper-proof remote loggingCloud SecureCopyright 2017, Oracle and/or its affiliates. All rights reserved. |] Solaris helps you maintain a secure platformCopyright 2017, Oracle and/or its affiliates. All rights reserved. |Source: Verizon Data Breach Investigations Report, 2016 Known Vulnerabilities are Regularly Exploited74%OF ORGANIZATIONSTAKE 3 MONTHS+TO PATCHC opyright 2017, Oracle and/or its affiliates.

5 All rights reserved. | Solaris Delivers Safe & Simple System Updates Solaris Image Packaging System Repository based distribution over thenetwork Automatic dependency management Integrated updates of Oracle Solaris Zones Boot Environments Based on ZFS snapshots and clones Enforces best practices for system update Fast to create, zero cost 100% reliable Oracle CPU provides predictable update scheduleCloud SecureCopyright 2017, Oracle and/or its affiliates. All rights reserved. |Age Old Problems of Buffer Overflow and Memory Corruption SolvedSolaris on SPARC Protects Data in MemoryMemoryPointer SPARC ProcessorH/W compares pointer key with memory lock Prevents 3 of the Top 5 Zero-Day attack vectors Always-on protection for the Oracle 12c SGA & PGA Fully compatible with existing 64-bit applications Studio Discover tool delivers memory bounds checking without Performance penaltyCloud SecureCopyright 2017, Oracle and/or its affiliates.

6 All rights reserved. | cloud -Scale Compliance ReportingSimple & Tailorable Way to Verify ProtectionCloud SecureCopyright 2017, Oracle and/or its affiliates. All rights reserved. |] Solaris gives you the tools to fully protect your dataCopyright 2017, Oracle and/or its affiliates. All rights reserved. |Frequency of Data Record TheftEVERY DAY3,618,139 RecordsEVERY HOUR150,756 RecordsEVERY MINUTE2,513 RecordsEVERY SECOND42 RecordsIn Healthcare, data theft costs around $200,000 every minuteSource: 2017, Oracle and/or its affiliates. All rights reserved. |Encrypt Everything, Everywhere, All the Time FastestCryptographyin the industry State-of-the-art algorithms with PKCS#11 No Performance loss Automaticallyaccelerates Java, Oracle Database, OpenSSL/TLS, and custom applications Meet compliance with high Performance disk encryption Interoperate with anyKMIP-CompliantKey Management Server including Oracle Key VaultProtected at rest, in motion, and in memoryApplicationsJavaOracle DatabaseOperating System UtilitiesStorageVirtualizationFirmwareAf fordablyCloud SecureCopyright 2017, Oracle and/or its affiliates.

7 All rights reserved. |Protect Data throughout the VM lifecycleContinuous protection with Oracle SPARC & SolarisLive VMsin Transit are Fully Encrypted -No Service Loss -No Performance LossVMVMVMVMVMVMVMVMVMVMVMVMVMVMVMVMC loud SecureCopyright 2017, Oracle and/or its affiliates. All rights reserved. |Advantages of Oracle Solaris for Oracle Database Resizing SGA with no downtime 22x faster DB Startup and ShutdownHigh Availability Memory usage prediction Dramatically simplified data administrationUtmost flexibility Memory optimizations for Oracle Database Guaranteed Quality of ServiceReal Time Analytics Embedded error detection Real-time data replicationComplete Integrated SolutionCloud EfficientCopyright 2017, Oracle and/or its affiliates. All rights reserved.

8 |Find I/O Outliers Added DTraceI/O Event Tracingto Oracle Database 12c V$ views for simple queries Avoid complex and time-consuming report snapshot and diagnosisv$kernel_io_outlierTIMESTAMP IO_SIZEIO_OFFSET DEVICE_NAME VARCHAR2(513) PROCESS_NAME VARCHAR2(64) TOTAL_LATENCY SETUP_LATENCY ..See demo at: Database I/O Diagnosis and TuningCloud EfficientCopyright 2017, Oracle and/or its affiliates. All rights reserved. |4 VirtualMachines4 VirtualMachines26%4 VirtualMachinesMost Efficient Enterprise Virtualization Zero Overhead Virtualization built in! Applications run as fast as bare metal Virtualize any application, not just the easy ones Virtualization by default++Virtualization Performance LossSPARC + VM + SolarisC + VM + S ~1%4 VirtualMachinesVM SoftwareCloud EfficientCopyright 2017, Oracle and/or its affiliates.

9 All rights reserved. |YOUR APPS imple, Secure cloud Scale Deployment and ComplianceFrom Development to ProductionSecuredeploymentSet Compliance PolicyCompliance AuditCreate your application VMs1-step secure image creationCloud AgileCopyright 2017, Oracle and/or its affiliates. All rights reserved. | Oracle Solaris 11 Built-in Investment ProtectionV2VP2 VOracle Solaris Zones System Preflight Checker 20+ years of binary compatibility Applications just work on newer Solaris releases Fast & simple migration: Reduce risk with automated checks before you move Tools move you quickly and simply Migrate your S10 environments in minutesSolaris 10 ZoneFUSION APPLICATIONSO racle Solaris 10 Solaris 10 ZoneDATABASEDATABASEO racle Solaris 10 Solaris ZoneFUSION APPLICATIONSC loud AgileCopyright 2017, Oracle and/or its affiliates.

10 All rights reserved. |Private cloud &Enterprise SystemsOracle CloudCloud@CustomerOracle Systems Technologies Power All Of Our Infrastructure Servers Storage Networking Virtualization Operating SystemsDevelopment Tools Management ToolsSame Technology, Same Architecture, Same Skill SetsCopyright 2017, Oracle and/or its affiliates. All rights reserved. |Available today! Solaris in Oracle cloud Infrastructure Classic Virtual Machine Compute (x86) Dedicated Compute (x86) Dedicated Compute (SPARC)Copyright 2017, Oracle and/or its affiliates. All rights reserved. | Oracle Lifetime Support Premier Support Provides maintenance for your Oracle hardware and integrated software (for example, firmware). Maintenance and software upgrades are included for Oracle operating systems and Oracle VM for ten years from their general availability date -extended to 20 years for Solaris 11 Extended Support for Operating Systems Puts you in control of your operating system upgrade strategy by providing additional maintenance and upgrades for Oracle Solaris operating system for an additional fee Sustaining Support for Operating Systems Maximizes your investment protectixonby further extending support for operating systems and firmware.