Joseph:
# Mainly I want to know how to securely restrict Oracle database users
to connect only through application.
You can use an after logon database trigger and look at each new
( about to be ) session and see what program etc is involved ...
reject anything that does not cut mustard.