计量管理信息系统中的数据库安全

Database Security of Metrology Information Management System

当前信息安全越来越引起人们的重视,本文在介绍计量信息管理系统的架构设计、开发环境和功能模块设计的基础上,重点讨论数据库的安全问题。系统采用ASP+IIS+SQL Server 2005平台架构,结合数据库技术和Web技术,从网络系统层次、操作系统层次和数据库管理系统层次等多方面进行安全性分析,采用用户身份认证、防火墙技术、基于角色的访问控制、数据加密、审计追踪与入侵检测、防数据库下载和防SQL注入攻击等技术对数据库进行保护。

Nowdays information security has drawn increasing attention. The article focuses on the security of database on the ba- sis of introducing the architecture design, development environment and function module design. The system combines database technology with Web technology using ASP ＋ IIS ＋ SQL Server 2005 platform architecture. User identity authentication, firewall technology, role based acess control, data encryption, audit trail and intrusion detection, anti database download and anti-SQL attack injection are used to protect the database considering network system level, operating system level and database manage- ment system level.