Web Configuration, Security in Oracle APEX

Question

I want to build an web application in Oracle APEX, where i want users to enter into the database server through the application server, thus i can ensure more security in my application. IF this is hard, then is there any other way where i can ensure more security in a web application in Oracle APEX?

Answer 1

Oracle APEX is a very stable and secure environement.

As is,

• you can encrypt and enforce high level passwords for the users
• you can lock account to avoid brute force attacks
• Devs and admins have accounts locked after a few attempts by default to avoid this issue
• The service can be easily configured with any SSL
• Webservices, like most of them, can be programmed to use access_tokens and other validations.

To my knowledge any additions security could be configured on the server and firewall. So I would say that you can do I lot, but it is up to you to perform good practices when defining your system's security.

Hope ity helps and good luck! :)