Method for enhancing the database security based on agent way

Abstract

The invention discloses a method for enhancing the database security based on an agent way, belonging to the technical field of the database and the information security. A requesting survey and filtration mechanism is deployed between an application server and a database server and comprises address mapping of the database server, entitlement management being independent of a database and dangerous command management function so as to finally achieve the purpose of enhancing the access security of the database; wherein the address mapping of the database server is the precondition of realizing independent entitlement management and dangerous command management function. In addition, the method is fully transparent for an application system accessing the database; the existing applicationsystem does not need to be changed after the method is deployed. The address mapping mechanism realizes the mapping function of an interface and hides a real IP address and the interface; therefore, an attacker can not directly interact with the database server, thus effectively increasing the security of the database.

Description

technical field [0001] The invention belongs to the technical field of database and information security, and relates to a database security enhancement method. Background technique [0002] In information systems, databases are widely used. As a collection of information, the database system stores the most valuable information in the system, and is the core component of the information system. Therefore, the security of the database is very important. [0003] In the network environment, the security problems faced by the database system include: [0004] (1) The database administrator (DBA) authority is too high. The security level of the database system widely used at present is C2 level, and this type of system adopts the autonomous access control (DAC) mode in terms of access control. In this mode, the DBA role has the highest authority, and the user's authority can be spread without restriction, which makes obtaining the DBA role a target of attackers (such as netw...

AI Technical Summary

Problems solved by technology

Once the attacker obtains the DBA role, it means that the database will be completely exposed, and there is no security at all

[0005] (2) Database system security vulnerabilities

Many of these vulnerabilities can be easily exploited by attackers to initiate intrusion or destruction, resulting in the disclosure of confidential data or system control rights

[0006] (3) Suffering from malicious attacks

These attacks will pose a very serious threat to the security of the database.

Images