Database safeguarding method based on data stream restoration technology

Abstract

The invention discloses a database safeguarding method based on data stream restoration technology, for purpose of protecting the safety of key databases. A system of the method is connected between an application server and a database server in series and mainly consists of a data stream restorer and an access controller. A message transmitted by the application server to a database is intercepted and captured by the data stream restorer. The data stream restorer buffers the message, restores the message into a corresponding TCP data stream, restores SQL sentences from the data stream and submits the SQL sentences to the access controller for safety examination. After passing the safety examination, the message is forwarded to the database server, and an execution result sequentially undergoes restoration and examination and then is forwarded to the application server. Due to the database safeguarding method, the fine-grained safety examination and isolation of the existing application and database communication can be carried out, thereby greatly enhancing the safeguarding capability of the database.

Description

technical field [0001] The invention relates to a security protection method in the technical field of information security, in particular to a database security protection method based on data flow restoration technology. Background technique [0002] With the rapid development of computer technology, the application of database is very extensive and penetrates into various fields, but the security problem of database has followed. As the aggregate of information, database system is the core component of computer information system, and its security is very important. [0003] In confidential units or large enterprises, extensive security protection measures have been implemented, including computer room security, physical isolation, firewalls, intrusion detection, encrypted transmission identity authentication systems, and so on. However, there has been no effective protection method for the database's own security issues. At the same time, there is a lack of effective d...

AI Technical Summary

Problems solved by technology

However, there has been no effective protection method for the security of the database itself.

At the same time, there is a lack of effective database security enhancement products in the current market

[0004] Conventional database protection methods are protected by security devices such as firewalls, which can only perform network layer filtering such as general ports, protocols, and addresses, and cannot effectively defend against malicious attacks on database servers, such as SQL injection attacks, attacks based on database operation interfaces, etc.

Images