基于入侵容忍的数据库安全体系模型

本文提出了一种基于入侵容忍的数据库安全体系模型。在数据库受到入侵的情况下,该模型从事务处理的角度出发,结合入侵检测和入侵容忍技术,把对关键数据的操作及可疑事务都进行隔离,运用多阶段控制技术来阻止破坏扩散,同时事务合并与多阶段控制技术相结合,进一步减少入侵可能对系统造成的破坏。从而保证系统在被入侵时,为合法用户提供不间断服务。

A security database model based on intrusion tolerance

This paper presents a security database model based on intrusion tolerance.In the case of the invasion of the database,from the perspective of the transaction,this model combined with intrusion detection and intrusion tolerance technology,the operation on the key data and suspicious transactions are isolated,and multi-stage damage control technology was presented to prevent damage proliferation,combined the multi-stage control technology with transaction merging,the system may further reduce the invasion of...