A database security access control method and system

Abstract

The invention provides a security access control method and a system of a database. The method comprises the steps of collecting a database access mode and a database access log, analyzing the database access mode and the database access log according to database access security elements, formatting SQL (Structured Query Language) statements in the analyzed database access mode and the database access log, collecting database security access request information input by a user, identifying the database security access request information according to the formatted database access mode and the database access log, and generating an identification result. According to the security access control method and the system, the security control of a database system is improved, and the data leakage caused by unauthorized data access due to imperfect authority monitoring in a data system is reduced.

Description

technical field [0001] The present invention relates to the technical field of computer network security, in particular to database security control technology, specifically a database security access control method and system. Background technique [0002] At present, the data systems of all walks of life are equipped with databases, and a large amount of information is stored in the databases. For example: a large amount of customer information is stored in the database of the bank, such as the account number and password of the customer; a large amount of source code is stored in the database of the IT company; a large amount of sales information is stored in the database of the product sales company, such as each model Sensitive information such as product cost price, sales price, and corresponding customer groups. [0003] There is a common problem in the data systems of the above-mentioned industries: the leakage of sensitive data such as customer information, and thi...

AI Technical Summary

Problems solved by technology

[0003] There is a common problem in the data systems of the above-mentioned industries: the leakage of sensitive data such as customer information, and this problem is increasingly becoming an information security problem that damages the public interest, threatens the healthy development of the enterprise, and has a significant impact on the reputation of the enterprise

The above-mentioned work consumes a lot of manpower and time. Not only the coverage and accuracy of the review cannot be guaranteed, but also the post-censorship review of some high-risk behaviors cannot meet the timeliness requirements, let alone real-time access control

Therefore, the hysteresis and coarse-grained nature of traditional database security access control methods cannot satisfy the data security of the data system, and there are serious security risks.

Images