摘要
目前,国内外入侵检测技术主要集中在网络和操作系统层,而对处于信息存储和管理核心位置的数据库,却很少有相应的入侵检测机制。提出一种应用级数据库入侵检测方法,从单个SQL语句结构、SQL语句操作的数据和应用系统操作行为三个层面进行入侵检测。既对用户"做什么"进行了检测,又进一步检测用户"怎么做",从而避免应用系统漏洞导致的数据库安全威胁。
At present,intrusion detection methods at home or abroad all focused on the network and operating system layer,but only little related intrusion detection mechanism is for database,where is the core of information storage and management.In this paper,a database application-level intrusion detection method is proposed.We carry out intrusion detection from three aspects such as the SQL statement structure,the data the SQL operated and the behaviour of Application system.In this way,we can comprehensively and carefully detect what users did and how they did.Thus we can prevent the security menace of the database from the vulnerability of application systems.
出处
《计算机应用与软件》
CSCD
2010年第4期280-282,285,共4页
Computer Applications and Software
关键词
数据库入侵检测
数据库安全
入侵检测
Database intrusion detection Database security Intrusion detection