Data-base malevolence transaction method and system thereof

Abstract

The invention provides a processing method of malicious affairs of a database system and a system thereof, aiming at the problem that the security is weak and the response efficiency is low when the prior database system faces the attack of the malicious affairs. An affair restoration log system independent of the original log system of the database is set, the executing history of affairs is recorded in the unit of an affair when the affair is submitted, and then the legality of the submitted affair is determined on the basis of the content recorded by the affair restoration log; when an invading malicious affair is detected, all the data affected by the malicious affair are searched by retrieving the affair restoration log and are restored, and the operation result of the unaffected affairs remains, thereby ensuring accuracy and usability of the database system. The after-set processing mode of the method and the system can limit the efficiency derating in an acceptable range, ensuring the timely response of the database system to a user's request.

Description

technical field [0001] The present invention mainly relates to a method and a system for enhancing the security of a database system, and more precisely relates to a method and a system for ensuring data correctness after an attacker bypasses an intrusion prevention component of the database system. Background technique [0002] With the increase in the demand for information sharing, the application of the upper layer of the database continues to expand, and the attack methods of the attackers have become diversified. The database system responsible for storing and managing sensitive information is facing more and more threats. It is difficult to guarantee the database security only through preventive measures. The system provides uninterrupted service. A high-security system should have the ability to detect intrusions and automatically restore to a normal state. The general process of intrusion prevention for high-security data systems is: protection→detection→error limi...

AI Technical Summary

Problems solved by technology

[0009] Aiming at the problem of weak security and low response efficiency of the existing database system in the face of malicious transaction attacks, the present invention provides a method and system for processing malicious transactions in the database system. When the intrusion detection system finds that the Afterwards, subsequent transactions affected by malicious transactions can be accurately found and rolled back, and the results of unaffected transaction operations will be retained, thus ensuring the correctness and availability of the database system

Images