一种应用级数据库入侵检测方法

METHOD OF APPLICATION-LEVEL DATABASE INTRUSION DETECTION

目前,国内外入侵检测技术主要集中在网络和操作系统层,而对处于信息存储和管理核心位置的数据库,却很少有相应的入侵检测机制。提出一种应用级数据库入侵检测方法,从单个SQL语句结构、SQL语句操作的数据和应用系统操作行为三个层面进行入侵检测。既对用户"做什么"进行了检测,又进一步检测用户"怎么做",从而避免应用系统漏洞导致的数据库安全威胁。

At present,intrusion detection methods at home or abroad all focused on the network and operating system layer,but only little related intrusion detection mechanism is for database,where is the core of information storage and management.In this paper,a database application-level intrusion detection method is proposed.We carry out intrusion detection from three aspects such as the SQL statement structure,the data the SQL operated and the behaviour of Application system.In this way,we can comprehensively and carefully detect what users did and how they did.Thus we can prevent the security menace of the database from the vulnerability of application systems.