Automatic logoff after specified time

This requires that if a user is idle for some specified time, the connection must be terminated, requiring the user to login again. Idle connections are easy targets for hackers. Chapter 4, the section on Profile Based Security, explains how to achieve this using Oracle Profiles.

Change passwords often (enforced by system)

Even if the hackers crack the password, if they are changed often, the discovery becomes useless. However, most users do not change their password often. This requirement calls for establishing a mechanism that forces the users to change passwords at regular intervals. In Chapter 4, under the section on Profile Enforced Password Management, we have described a method to meet this requirement using Profiles.