| 一种应用级数据库入侵检测方法 |
| |
| 引用本文： | 李榕,赵雷,杨季文.一种应用级数据库入侵检测方法[J].计算机应用与软件,2010,27(4):280-282,285. |
| |
| 作者姓名： | 李榕 赵雷 杨季文 |
| |
| 作者单位： | 苏州大学计算机科学与技术学院,江苏,苏州,215006 |
| |
| 摘 要： | 目前,国内外入侵检测技术主要集中在网络和操作系统层,而对处于信息存储和管理核心位置的数据库,却很少有相应的入侵检测机制。提出一种应用级数据库入侵检测方法,从单个SQL语句结构、SQL语句操作的数据和应用系统操作行为三个层面进行入侵检测。既对用户做什么进行了检测,又进一步检测用户怎么做,从而避免应用系统漏洞导致的数据库安全威胁。
|
| 关 键 词： | 数据库入侵检测 数据库安全 入侵检测 |
METHOD OF APPLICATION-LEVEL DATABASE INTRUSION DETECTION |
| |
| Li Rong,Zhao Lei,Yang Jiwen.METHOD OF APPLICATION-LEVEL DATABASE INTRUSION DETECTION[J].Computer Applications and Software,2010,27(4):280-282,285. |
| |
| Authors: | Li Rong Zhao Lei Yang Jiwen |
| |
| Affiliation: | School of Computer Science and Technology/a>;Soochow University/a>;Suzhou 215006/a>;Jiangsu/a>;China |
| |
| Abstract: | At present,intrusion detection methods at home or abroad all focused on the network and operating system layer,but only little related intrusion detection mechanism is for database,where is the core of information storage and management.In this paper,a database application-level intrusion detection method is proposed.We carry out intrusion detection from three aspects such as the SQL statement structure,the data the SQL operated and the behaviour of Application system.In this way,we can comprehensively and ... |
| |
| Keywords: | Database intrusion detection Database security Intrusion detection |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
|
