Oracle Strengthens Security Leadership with Additional Common Criteria Evaluations

Oracle today announced it has enhanced its security evaluation program with new security evaluations that help ensure security-conscious customers can rely on Oracle( r ) for a secure, integrated infrastructure stack. The latest evaluations bring the total number of independent security certifications to 22 and extend beyond Oracle Database to include Oracle Identity Management and Oracle products on Linux.

With today's announcement, Oracle has successfully completed Common Criteria Evaluations at EAL4 - the highest level generally achieved by commercial software - for the following products: Oracle Internet Directory, a component of Oracle Identity Management; Oracle9i Database Release 2; and Oracle9i Label Security Release 2. The availability of these products is essential to security-aware customers who must comply with procurement policies such as National Security Telecommunications Information Systems Security Policy ( NSTISSP ) Number 11, which requires information systems involved in nation security to have independent measures of assurance and U.S. Department of Defense Directives. Oracle's security evaluations have long positioned the company as a leader in delivering secure, independently evaluated software to organizations in the public and private sectors.

The Common Criteria evaluation of Oracle Internet Directory is a significant evaluation of Oracle's middleware offering. The evaluation also complements the recently completed Federal Information Processing Standards Publication ( FIPS ) 140-2 evaluation of the Oracle Cryptographic Libraries Secure Socket Layer, a key component of Oracle Application Server. Together, these evaluations provide additional assurance to customers that rely on Oracle for secure middleware capabilities.

As proof of Oracle's ongoing dedication to the Linux platform, the company completed Common Criteria evaluations for Oracle9i Database Release 2 and Oracle9i Label Security Release 2 on Novell SuSE Linux. These are the first evaluations Oracle has completed on the Linux platform and provide customers with the ability to use independently tested Oracle products with an open source operating system. Customers can be confident that Linux is built to run their mission-critical business applications.

"Our recent Common Criteria evaluations solidify Oracle's position as a leader in security," said Mary Ann Davidson, chief security officer, Oracle Corp. "These evaluations also underscore our commitment to delivering secure products on Linux and to extending the formal security evaluation process to Oracle's entire platform."

About Oracle Oracle ( NASDAQ: ORCL ) is the world's largest enterprise software company. For more information about Oracle, visit our Web site at http://www.oracle.com.

###

Trademarks

Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners.


Rebecca Hahn
Oracle Corp.
+1.714.445.4611
rebecca.hahn@oracle.com


Liza Dela Torre
Zeno Group for Oracle
+1.415.369.8111
liza.delatorre@zenogroup.com

Related Articles

• Oracle Announces Dedicated Linux Test Lab
  Thursday, 17 February 2005



• Oracle Database 10g Sets New World Record
  Monday, 17 January 2005



• Oracle Announces Combined Workforce
  Monday, 17 January 2005



• Japan's Muratec Sales Delivers CRM Solution Built on Unify NXJ and Oracle 10g
  Wednesday, 12 January 2005



• Fidelity Information Services to Integrate and Remarket Oracle E-Business Suite
  Wednesday, 12 January 2005



• Oracle Unveils Oracle(R) Database Lite 10g
  Tuesday, 11 January 2005



• Oracle plans database development tool
  Sunday, 12 December 2004



• McNealy Addresses Oracle OpenWorld- Solaris 10 Is Enterprise Platform Of Choice
  Thursday, 9 December 2004



• Sun and Oracle Demonstrate Outstanding Scalability with Solaris OS-based Sun Systems
  Thursday, 9 December 2004



• PolyServe Introduces High Availability Solution for Oracle Database Clusters on Linux
  Wednesday, 8 December 2004



• Lumigent Technologies Brings Data Auditing Solution for Oracle to HP-UX and AIX
  Wednesday, 8 December 2004



• Oracle and Sun Power Mission Critical Data Warehouses Around the World
  Wednesday, 8 December 2004