{"id":7758,"date":"2020-10-23T14:10:12","date_gmt":"2020-10-23T14:10:12","guid":{"rendered":"https:\/\/rax-stg-wp-aws.com\/blogs\/threat-intelligence-and-security-practices-in-the-oracle-cloud\/"},"modified":"2026-11-03T19:29:01","modified_gmt":"2026-11-03T19:29:01","slug":"threat-intelligence-and-security-practices-in-the-oracle-cloud","status":"publish","type":"blogs","link":"https:\/\/www.rackspace.com\/en-gb\/blogs\/threat-intelligence-and-security-practices-in-the-oracle-cloud\/","title":{"rendered":"Threat Intelligence and security practices in the Oracle Cloud"},"content":{"rendered":"<p><strong>Introduction<\/strong><\/p>\n<p><a href=\"https:\/\/www.oracle.com\/corporate\/security-practices\/\">The Oracle\u00ae Cloud Security Practices team<\/a>&nbsp;in their own words, &#8220;describe how Oracle protects the confidentiality, integrity, and availability of customer data and systems that are hosted in the Oracle Cloud and\/or&nbsp;accessed when providing Cloud services. Today, 430,000 customers in 175 countries use&nbsp;Oracle technologies to seize business opportunities and solve real, tangible challenges.<\/p>\n<p><strong>What is Oracle Cloud Security?<\/strong><\/p>\n<p>&#8220;Oracle, a global provider of enterprise cloud computing, is empowering businesses of all&nbsp;sizes on their journey of digital transformation. Oracle Cloud provides leading-edge&nbsp;capabilities in software as a service, platform as a service, infrastructure as a service,&nbsp;and data as a service.&#8221;<\/p>\n<p><img decoding=\"async\" src=\"\/wp-content\/uploads\/2026\/blog_article_images\/26487-body-Picture1_24.png\" alt=\"OCI Security Pic 1\" \/><\/p>\n<p><a href=\"https:\/\/www.slideshare.net\/MarketingArrowECS_CZ\/oracle-cloud-infrastructure\"><em>Image Source<\/em><\/a>&nbsp;<\/p>\n<p><strong>How does Oracle help customers?<\/strong><\/p>\n<p><a href=\"https:\/\/www.oracle.com\/corporate\/security-practices\/\">The Oracle Cloud Security Practices documentation&nbsp;continues,<\/a> &#8220;Oracle helps customers develop strategic roadmaps and advance their journey to the cloud from any point: new cloud deployments, legacy environments, and hybrid implementations. Oracle&#8217;s complete, integrated approach makes it easy for companies to get started in the cloud and even easier to expand as business grows. Oracle&#8217;s application suites, platforms, and infrastructure leverage both the latest technologies and emerging ones\u2014including artificial intelligence (AI), machine learning, blockchain, and the Internet of Things (IoT)\u2014in ways that create business differentiation and advantage for customers.&nbsp;<\/p>\n<p>&#8220;Oracle supports customers on every step of the digital journey, with consulting, financing,&nbsp;support, and training services.&nbsp; Oracle&#8217;s security practices are multidimensional and reflect&nbsp;the various ways Oracle engages with its customers:<\/p>\n<p><img decoding=\"async\" src=\"\/wp-content\/uploads\/2026\/blog_article_images\/26487-body-Picture2_15.png\" alt=\"OCI Security Pic 2\" \/><\/p>\n<p><a href=\"https:\/\/slideplayer.com\/slide\/14287280\/\"><em>Image Source<\/em><\/a>&nbsp;<\/p>\n<p><img decoding=\"async\" src=\"\/wp-content\/uploads\/2026\/blog_article_images\/26487-body-Picture3_12.png\" alt=\"OCI Security Pic 3\" \/><\/p>\n<p><em><a href=\"https:\/\/blogs.oracle.com\/cloud-infrastructure\/oracle-iaas-and-seven-pillars-of-trusted-computing-platform-part-1-of-4\">Image Source<\/a><\/em>&nbsp;<\/p>\n<ul>\n<li>&#8220;Oracle has corporate security practices that encompass all the functions related to&nbsp;security, safety, and business continuity for Oracle&#8217;s internal operations and its&nbsp;provision of services to customers. They include a suite of internal information security&nbsp;policies as well as different customer-facing security practices that apply to different&nbsp;service lines.&nbsp;<\/li>\n<li>&#8220;Oracle Cloud Security Practices describe how Oracle protects the confidentiality,&nbsp; integrity, and availability of customer data and systems that are hosted in the Oracle&nbsp;Cloud and\/or accessed when providing Cloud services.<\/li>\n<li>&#8220;With Oracle Software Security Assurance, Oracle&#8217;s goals are to ensure that Oracle&#8217;s&nbsp;products help customers meet their security requirements while providing for the most&nbsp;cost-effective ownership experience.&#8221;<br \/>\n\t&nbsp;<\/li>\n<\/ul>\n<p>An <a href=\"https:\/\/blogs.oracle.com\/cloudsecurity\/how-threat-intelligence-complements-security-controls-in-oracle-saas-cloud\">Oracle blog post by David Cross<\/a>&nbsp;adds, &#8220;Threat intelligence provides value: as a source of data in the buildout, deployment,<br \/>\nand monitoring of security controls. In this blog, we will describe threat intelligence,&nbsp;its uses during the DevSecOps cycle, and how SaaS Cloud Security applies the threat&nbsp;intelligence lifecycle in its operations.&#8221;<\/p>\n<p><img decoding=\"async\" src=\"\/wp-content\/uploads\/2026\/blog_article_images\/26487-body-Picture4_7.png\" alt=\"OCI Security Pic 4\" \/><\/p>\n<p><strong>&nbsp;Why do we need cloud security?&nbsp;<\/strong><\/p>\n<p>An <a href=\"https:\/\/www.oracle.com\/linux\/technologies\/rdbms-12c-oraclelinux.html\">Oracle Linux\u00ae document<\/a>&nbsp;recommends that you ensure data privacy, protect against insider threats, and enable regulatory compliance with a comprehensive portfolio of security solutions, on-premises and&nbsp;in the cloud. Simplify the challenges of identity and access management, even in a complex&nbsp;hybrid IT environment.<\/p>\n<p><strong>&nbsp;What is a cloud security control center?<\/strong><\/p>\n<p><a href=\"https:\/\/www.oracle.com\/be-nl\/database\/security\/products.html\">Oracle<\/a>&nbsp;recommends that you&nbsp;&#8220;secure your cloud database with a single, unified database security control center that<br \/>\nidentifies sensitive data and masks it, alerts on risky users and configurations, audits&nbsp;critical database activities, and discovers suspicious attempts to access data.&#8221;<\/p>\n<p><strong>Threat Intelligence (TI)<\/strong><\/p>\n<p><a href=\"https:\/\/blogs.oracle.com\/cloudsecurity\/how-threat-intelligence-complements-security-controls-in-oracle-saas-cloud\">Cross<\/a>&nbsp;says, &#8220;Threat intelligence is the information that a security team can use to take the&nbsp;required action against a threat.&#8221; He continues, &#8220;Security teams such as Oracle SaaS Cloud&nbsp;Security (SCS), use standards and automation to rapidly analyze, correlate, and validate TI&nbsp;feeds.&#8221;<\/p>\n<p><strong>Principles of Threat Intelligence<\/strong><\/p>\n<p><a href=\"https:\/\/blogs.oracle.com\/cloudsecurity\/how-threat-intelligence-complements-security-controls-in-oracle-saas-cloud\">Cross<\/a>&nbsp;goes on to describe the principles of TI: &#8220;One of the best ways to understand the value of&nbsp;threat intelligence is to examine three commonly accepted principles in a computing&nbsp;environment:<\/p>\n<p>1. &#8220;<strong>Evidence-based knowledge<\/strong>: Good threat intelligence is not individual opinions or&nbsp;intuitions. It is based on information that has been purposefully collected and curated&nbsp;to provide factual details on specific events, activities, and behaviors.&nbsp;<br \/>\n2. <strong>Asset risk<\/strong>: Threat intelligence should always be correlated with an existing or emerging risk to the assets that you are protecting. For example, TI can point to a&nbsp;potential security event that is related to the theft of high-value data or an existing&nbsp;threat to the availability of critical resources.<br \/>\n3. <strong>Actionable<\/strong>: Threat intelligence must be aligned with processes, people, and tools&nbsp;to analyze the threat and to link the information with specific actions that can block, prevent, or mitigate the threat. For example, when a SQL Injection (SQLI) attack occurs, a&nbsp;security response team can introduce a blocking signature in the Web Application&nbsp;Firewall (WAF) or perform a code change and patch a vulnerability.&#8221;<\/p>\n<p><strong>Threat Intelligence and DevSecOps<\/strong><br \/>\n<a href=\"https:\/\/blogs.oracle.com\/cloudsecurity\/how-threat-intelligence-complements-security-controls-in-oracle-saas-cloud\">Cross&#8217;s post<\/a>&nbsp;continues, &#8220;Threat intelligence is primarily used by security teams, whether pen testers,&nbsp; security incident responders, or security architects, to defend and mitigate against&nbsp;emerging threats during operate and monitor phases of the DevSecOps cycle. It&#8217;s also a&nbsp;valuable source of information for many roles in a DevSecOps culture and engineering model.<\/p>\n<p><img decoding=\"async\" src=\"\/wp-content\/uploads\/2026\/blog_article_images\/26487-body-Picture5_6.png\" alt=\"OCI Security Pic 5\" \/><\/p>\n<p><a href=\"https:\/\/blogs.oracle.com\/cloudsecurity\/how-threat-intelligence-complements-security-controls-in-oracle-saas-cloud\"><em>Image source<\/em><\/a><\/p>\n<p>&#8220;For example, developers and testers can use threat intelligence in the early planning&nbsp;phase to ensure that they can holistically compose threat models and complete security&nbsp;architecture reviews based on the environment and threats that their software might be&nbsp;vulnerable to. In addition, in the build and test phases, they need to make sure their&nbsp;software does not unnecessarily expose the product to other potential attacks or emerging&nbsp;risks. Often, DevSecOps engineers use TI to not only block a potential attack but also to&nbsp;monitor for attacks.<\/p>\n<p>\n&#8220;For security teams, TI is valuable in the planning phase as TI enables them to build and&nbsp;implement proactive responses as opposed to focusing on reactive remediations. TI is a&nbsp;natural complement and source of input to the Architectural Risk Analysis (ARA) that is&nbsp;commonly performed in the code (design) phase of DevSecOps.&#8221;<\/p>\n<p><strong>Threat Intelligence Goals for Oracle SaaS Cloud Security<\/strong><\/p>\n<p>\n<a href=\"https:\/\/blogs.oracle.com\/cloudsecurity\/how-threat-intelligence-complements-security-controls-in-oracle-saas-cloud\">Cross<\/a>&nbsp;goes on, &#8220;At a high level, the SCS organization has three sustaining TI goals:<\/p>\n<ol>\n<li>&#8220;Ensure we can accurately and consistently identify and assess threats against Oracle SaaS.<\/li>\n<li>&#8220;Adjust the prioritization of security DevSecOps engineering activities and projects based on findings from our threat intelligence program.<\/li>\n<li>&#8220;Collaborate and share our feeds, analysis, and insights with other security lines of business inside Oracle.&#8221;<\/li>\n<\/ol>\n<p><strong>&nbsp;How Threat Intelligence Complements Security Controls in Oracle SaaS Cloud<\/strong><\/p>\n<p>\n<a href=\"https:\/\/blogs.oracle.com\/cloudsecurity\/how-threat-intelligence-complements-security-controls-in-oracle-saas-cloud\">Cross<\/a>&nbsp;says, &#8220;Over the past few years, the SCS organization has significantly advanced and matured&nbsp;our threat intelligence program so that we can align with the rapid adoption and growth of&nbsp;cloud-based SaaS applications. At a high level, the SCS organization has three sustaining&nbsp;TI goals:<\/p>\n<ol>\n<li>&#8220;Ensure we can accurately and consistently identify and assess threats against Oracle SaaS.<\/li>\n<li>&#8220;Adjust the prioritization of security DevSecOps engineering activities and projects based on findings from our threat intelligence program.&nbsp;<\/li>\n<li>&#8220;Collaborate and share our feeds, analysis, and insights with other security lines of business inside Oracle.&#8221;<\/li>\n<\/ol>\n<p><strong>Threat Intelligence lifecycle<\/strong><\/p>\n<p>About the TI lifecycle, <a href=\"https:\/\/blogs.oracle.com\/cloudsecurity\/how-threat-intelligence-complements-security-controls-in-oracle-saas-cloud\">Cross<\/a>&nbsp;says, &#8220;It is not well-known outside of the security community, but threat intelligence has a lifecycle. It is a continuous lifecycle, just like DevSecOps, that adapts and improves&nbsp;over time based on results.&nbsp;<\/p>\n<p><img decoding=\"async\" src=\"\/wp-content\/uploads\/2026\/blog_article_images\/26487-body-Picture6_5.png\" alt=\"OCI Security Pic 6\" \/><\/p>\n<p><a href=\"https:\/\/blogs.oracle.com\/cloudsecurity\/how-threat-intelligence-complements-security-controls-in-oracle-saas-cloud\"><em>Image Source<\/em><\/a><\/p>\n<p>&nbsp;<\/p>\n<p><strong>Planning<\/strong><\/p>\n<ul>\n<li><strong>Planning<\/strong>: The threat intelligence lifecycle that SCS uses starts with planning. During this phase, we identify potential TI gaps that may exist and also align our needs with the&nbsp;overall DevSecOps product goals across the broader SaaS Engineering lines of business. TI&nbsp;can often provide a mitigation when auditing or monitoring gaps exist in a given component&nbsp;or service. This mitigation can be more attractive than unnecessarily overloading a system&nbsp;with expensive audit logging functions. The SCS organization performs and completes threat&nbsp;modeling exercises for all SaaS properties. These exercises are open discussions with the&nbsp;SaaS DevSecOps teams to systematically identify potential risks to the product, by examining&nbsp;risks at strategic, operational, and tactical levels.<\/li>\n<li><strong>Collection<\/strong>: After the project goals have been defined, we procure the latest information&nbsp;from both internal and external sources as well as from various partnerships (see Threat&nbsp;Intelligence Sources below).&nbsp;<\/li>\n<li><strong>Processing<\/strong>: Next, we categorize, organize, and filter the information that we have&nbsp;collected, based on our objectives. We explicitly score and prioritize the data and develop&nbsp;appropriate techniques on how it may be monitored or detected using our SIEM and alerting&nbsp;technologies.<\/li>\n<li><strong>Analysis<\/strong>: After processing, we analyze the information and how a particular threat&nbsp;might potentially impact our environment. This analysis can include threat-hunting activities,&nbsp;which are the proactive search for signs of active or historical malicious activity in our&nbsp;infrastructure or applications. SCS uses both structured and unstructured threat-hunting&nbsp;approaches. Structured threat hunting is when we determine what we want to look for and then&nbsp;detect if it is in place. Unstructured threat hunting is dependent on reviewing raw threat&nbsp;intelligence and signals to identify anomalies that may not have been detected in the past.<\/li>\n<\/ul>\n<p><em>&#8220;After analysis, we share the intelligence that we found with various security and DevSecOps organizations in Oracle for further correlation, reporting, and analysis. During this step in the continuous cycle, we collect and incorporate feedback from all stakeholders and incorporate these insights into the next planning cycle.&#8221;&nbsp;<\/em><\/p>\n<p><strong>&nbsp;Rackspace&#8217;s Goals for Oracle SaaS Cloud Security<\/strong><\/p>\n<ol>\n<li>Our security best practices accurately and consistently identify and assess threats against Oracle SaaS.<\/li>\n<li>Rackspace adjusts the prioritization of security DevSecOps engineering activities and projects based on our threat intelligence program findings.&nbsp;<\/li>\n<li>Rackspace collaborates and shares the feeds, analysis, and insights with other security lines of business inside Oracle.<\/li>\n<\/ol>\n<p><strong>&nbsp;Conclusion<\/strong><\/p>\n<p>Cross&#8217;s post concludes, &#8220;threat intelligence is always in context, security incident&nbsp;responders can use it to better understand an incident, complete forensic analysis, and&nbsp;ensure adequate mitigation controls are in place. For the best results in Oracle SaaS,&nbsp;the SCS organization uses the threat intelligence program results, insights, and analysis to maximize benefits and protection for all SaaS customers.&#8221;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Threat Intelligence and security practices in the Oracle Cloud<\/p>\n","protected":false},"author":2,"featured_media":7760,"menu_order":0,"comment_status":"open","ping_status":"open","template":"","format":"standard","meta":{"content-type":"","nid":"26487","content_type":"blog","created_by":"10130","authored_on":"2024-01-14T15:10:12+00:00","field_article_industries":"","tag_category":"Technical","field_blog_author_text":"by Nishant Singh, Oracle Database Administrator, Rackspace Technology","seo_description":"Understand Oracle's unwavering commitment to security and explore their comprehensive cloud security practices, safeguarding customer data and systems.\r\n","field_featured_image":"","insights_image":"\/wp-content\/uploads\/2026\/blog_technical_images\/26487-insights_image-oracle-technical-blog-1-insights.jpg","field_partners":"","rxt_platforms":"Oracle, Oracle Cloud Infrastructure","product":"","publisheddate":"2020-10-23T14:10:12","rxt_solutions":"Security, Application Security, Security Operations","opengraph_tag":"","x_tag":"","teaser_flag":"Technical Blog","seo_titile":"Intelligence and Security Practices Oracle Cloud | Rackspace","field_topics":"","field_slug":"threat-intelligence-and-security-practices-in-the-oracle-cloud","footnotes":""},"categories":[178],"tags":[204],"class_list":["post-7758","blogs","type-blogs","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","tag-technical"],"_links":{"self":[{"href":"https:\/\/www.rackspace.com\/en-gb\/wp-json\/wp\/v2\/blogs\/7758","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.rackspace.com\/en-gb\/wp-json\/wp\/v2\/blogs"}],"about":[{"href":"https:\/\/www.rackspace.com\/en-gb\/wp-json\/wp\/v2\/types\/blogs"}],"author":[{"embeddable":true,"href":"https:\/\/www.rackspace.com\/en-gb\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rackspace.com\/en-gb\/wp-json\/wp\/v2\/comments?post=7758"}],"version-history":[{"count":3,"href":"https:\/\/www.rackspace.com\/en-gb\/wp-json\/wp\/v2\/blogs\/7758\/revisions"}],"predecessor-version":[{"id":9660,"href":"https:\/\/www.rackspace.com\/en-gb\/wp-json\/wp\/v2\/blogs\/7758\/revisions\/9660"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.rackspace.com\/en-gb\/wp-json\/wp\/v2\/media\/7760"}],"wp:attachment":[{"href":"https:\/\/www.rackspace.com\/en-gb\/wp-json\/wp\/v2\/media?parent=7758"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.rackspace.com\/en-gb\/wp-json\/wp\/v2\/categories?post=7758"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.rackspace.com\/en-gb\/wp-json\/wp\/v2\/tags?post=7758"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}