Database security reinforcing method and device

Abstract

The invention provides a database security reinforcing method and device. The method and device are applied to a database of a pre-assigned database administrator and a pre-assigned security administrator. The method comprises the steps that an access request of a current database user for accessing current data from the database is received, and whether the current data is allowed to be accessed by the current database user or not is judged according to a mandatory access control strategy pre-established by the security administrator; if not, the current database user is prevented from accessing the current data, and if yes, whether the current database has the authority for accessing the current data or not is further judged according to a discretionary access control strategy pre-established by the database administrator; according to the further judgment result, if yes, the current database user is allowed to accessing the current data, and if not, the current database user is prevented from accessing the current data. According to the scheme, the database security can be improved.

Description

technical field [0001] The invention relates to the technical field of computer security, in particular to a method and device for database security reinforcement. Background technique [0002] With the continuous development and progress of computer technology, the amount of computer data is increasing. In order to better manage and utilize various types of data, databases have emerged to classify and store computer data through large-capacity storage devices. Sharing the data in the database with multiple users greatly improves the management of computer data and provides great convenience for users. As a large-capacity storage device, the database stores a lot of data. Malicious access behaviors of users are likely to leak important data of other users, causing huge losses to users. [0003] At present, in order to limit the access behavior of database users, avoid the leakage of important data in the database, and improve the security of the database, the database admin...

AI Technical Summary

Problems solved by technology

[0004] Aiming at the method of managing database user access rights in the prior art to improve database security, since the database administrator has super authority, he can set any authority of any user, once the account number and password of the database administrator are stolen, lawless Molecules can set the access rights of any user or create new users by logging in to the database administrator account to steal the data stored in the database. Therefore, the existing technology protects the database security through the database administrator, and the security of the database lower sex

Images