Database security protection system and method based on virtual databases and virtual patches

Abstract

The invention provides a database security protection system and method based on virtual databases and virtual patches. A virtual database server is established in a service mapping mode for hiding a real database server, and secondary certification and secondary authorization check technologies are fused at the same time for processing a network request data packet reaching the virtual database server in real time so as to achieve the security effects equivalent to that of installation of database patches. According to the database security protection system and the method, service mapping and two key technologies namely secondary certification and secondary authorization check are adopted, all legitimate and normal security access can smoothly pass through the mapped virtual database server, and relative data is obtained from the real database server. For most of unauthorized access and obvious attack behaviors, the requests are blocked by relative filtering mechanisms in the virtual database server so as to ensure safe operation of the real database server and the security of sensitive data in databases.

Description

technical field [0001] The invention belongs to the field of information security, and in particular relates to a database security protection system and method based on a virtual database and a virtual patch. Background technique [0002] With the rapid development of computer technology, the application of database is very extensive. As the aggregate of information, database system is the core component of computer information system, and its security is very important. However, due to the lack of security of the database itself, attackers may access the database through abnormal channels, or even implement buffer overflow or SQL injection to attack the database, resulting in the leakage of sensitive information and endangering data security and information system security. [0003] In order to ensure the security of databases and information systems, various enterprises and units have adopted many protective measures, but most of the protective measures and methods can o...

AI Technical Summary

Problems solved by technology

[0005] In addition, when the database server directly connects with users and application servers and provides data services, it is extremely vulnerable to various attacks; the hidden channels existing in the database system are also easily exploited by attackers

Images