Web数据库系统安全控制方案的设计与实现

Design and Implementation of the Security Control Program for Web Database System

在分析目前普遍采用安全实现策略的基础上,对Web数据库系统构建出一种基于应用层、系统层及数据层相结合的安全机制,利用身份认证、授权控制、数据加密、监视跟踪、审计、备份与故障恢复等技术来实现Web数据库系统的安全管理,有效地消除了系统的安全隐患,提高了系统的可靠性和可用性,并在恩施州中小学继续教育网络平台的开发实践中得到了有效应用.

Through the analysis of the commonly adopted current strategy of security implementation, the security organism is constructed for the Web database system based on the combination of the application layer, system layer and data layer; such techniques as identity establishment, authorization control, data coding, monitoring follow-up, auditing, backup and failure recovery are employed to realize the secure management for the Web database system so as to efficiently eradicate the latent danger and enhance the reliability and applicability; meanwhile, these techniques are efficiently applied to the development of the continuing education platform in some primary and middle schools in Enshi Autonomous Prefecture.