Property | Description |
---|---|
Parameter type | String |
Syntax | SEC_PROTOCOL_ERROR_FURTHER_ACTION = { CONTINUE | (DELAY,integer) | (DROP,integer) } |
Default value | CONTINUE |
Modifiable | ALTER SESSION, ALTER SYSTEM |
Basic | No |
SEC_PROTOCOL_ERROR_FURTHER_ACTION specifies the further execution of a server process when receiving bad packets from a possibly malicious client.
Values:
-
CONTINUE
The server process continues execution. The database server may be subject to a Denial of Service (DoS) if bad packets continue to be sent by a malicious client.服务器进程继续执行。如果坏包继续是一个恶意的客户端发送 数据库服务器可能会受到拒绝服务(DoS)(DELAY,integer) -
The client experiences a delay of integer seconds before the server process accepts the next request from the same client connection. Malicious clients are prevented from excessive consumption of server resources while legitimate clients experience a degradation in performance but can continue to function.客户体验延迟整数秒之后服务器进程接收来自同一客户端连接下一个请求。防止恶意用户的服务器资源的过度消耗而合法的客户体验性能退化而能继续功能。
-
(DROP,integer)
The server forcefully terminates the client connection after integer bad packets. The server protects itself at the expense of the client (for example, a client transaction may be lost). The client may reconnect and attempt the same operation.强行终止服务器的客户端连接后,整坏包。 客户端可以连接并执行相同的操作。相关考题:To control the execution of a server process when it is receiving bad packets from a potentially maliciousclient, you set the SEC_PROTOCOL_ERROR_FURTHER_ACTION initialization parameter as follows:SQL> ALTER SYSTEM SET SEC_PROTOCOL_ERROR_FURTHER_ACTION = Drop,10;What is the significance of this setting?A. It terminates the client connection after 10 bad packets and the client cannot reconnect to the sameinstance.B. It terminates the client connection after 10 bad packets but the client can still reconnect, and attempt thesame operation again.C. It terminates the client connection 10 seconds after receiving a bad packet and the client cannotreconnect to the same instance.D. It terminates the client connection after receiving a bad packet and the client can reconnect to the sameinstance after 10 minutes.Answer: B