Security component of database system

Abstract

The invention provides a security component of a database system. The security component comprises a log-on security component and a data processing security component, wherein the log-on security component comprises an interface generation module, a security code verification module, a password verification module and a window identifier verification module; and the data processing security component comprises a data interaction module, a format verification module, a code replacement module, a code encoding module and an error page generation module. By utilizing the technical scheme provided by the invention, the problems in the prior art can be effectively solved, sufficient protection can be provided for brute force attack, the storage mode and the security of the authority control can be improved, error pages can be prevented from releasing excessive sensitive information, and the threats caused by script injection and script attack can be prevented.

Description

technical field [0001] The invention relates to the security technology of the database system, in particular to the security component of the database system. Background technique [0002] With the popularization of the Internet in all walks of life and the development of Web applications, the security issues of websites, especially website database systems, have been paid more and more attention by people. When using ASP.NET to develop websites or enterprise project systems, security has become a key issue of primary consideration. [0003] For database systems developed based on ASP.NET, the main security threats come from the following aspects: [0004] 1) Brute force attack. If no systematic measures are taken to prevent malicious users from endlessly trying to log in to the database, the system is vulnerable to countless password guessing attacks. This is a type of brute force attack. This kind of attack is mainly to design a program that sends many requests to the...

AI Technical Summary

Problems solved by technology

Users with administrator privileges should be careful to choose passwords that are difficult to crack. But even a low-privileged user account may give attackers an opportunity to log into the system

[0005] 2) Unreliable storage method

Although this information is very useful during the development process, the developer must not and does not want to expose this information to the client in the final product

Images