Database auditing system and database auditing method

Abstract

The invention provides a database auditing system which comprises a database statement auditing module and a database user behavior auditing module. The database statement auditing module is used for analyzing collected auditing data, obtaining an SQL statement and detecting the obtained SQL statement. The database user behavior auditing module is used for analyzing the collected auditing data, obtaining user behavior and detecting the user behavior. The invention further relates to an auditing method based on the database auditing system. According to the database auditing system and the database auditing method, universality is high, detection efficiency is high, maintenance is convenient, a rule base is updated continuously to ensure that the false detection rate is reduced, the requirements for database safety of different users can be practically met, and the system and the method have the wide application prospect in the database auditing industry.

Description

technical field [0001] The invention belongs to the field of database auditing, in particular to a database auditing system and method thereof. Background technique [0002] With the rapid development of network and computer technology, the application of database is more and more extensive. As the core of information system, the security of database is particularly important. While the performance and efficiency of the database are constantly improving, how to effectively prevent the database system from being attacked and ensure the security and validity of the data in the database has become an important research topic of information security. [0003] In the existing database auditing system, the rules for data auditing are manually configured by auditors or the basic rules are preset by R&D personnel, and then the database data is mirrored through bypass deployment. After analyzing the data, it is compared with the set rules to determine whether it is abnormal. [0004...

AI Technical Summary

Problems solved by technology

[0004] This method of database audit requires auditors to have database knowledge and a certain understanding of the databases of various business systems of the enterprise. A large number of different rules need to be configured for each business system. The rules involve a wide range of options and items, and there is a certain possibility of misoperation.

Even if abnormal data is misjudged as normal data by the system, it cannot be discovered before causing obvious database security problems, and there is a hidden danger of missed detection

Images