Database attack defense method and system

Abstract

The invention provides a database attack defense method and related equipment. The method includes the steps of obtaining a database operation code to be sent to a database module, wherein the database operation code comprises operation related parameters input by a user; performing code analysis on the database operation code to determine a preset executable code contained in the database operation code; encrypting the preset executable code by using an encryption rule corresponding to the parser module; splicing the encrypted preset executable code with operation related parameters input bya user to obtain a spliced statement; and sending the spliced statement to a database module, so that the database module executes the encrypted data in the spliced statement to obtain a database operation result. According to the method, only the executable code preset in the system is encrypted, so that when the database executes the splicing statement, only the encrypted executable code is executed, operation related parameters input by a user are not executed, and therefore, attack of a malicious program on the database by operating the related parameters is avoided.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a database attack defense method and system. Background technique [0002] In the Internet environment, business information can be stored in the database system, and users can send operation requests to the database system through the client, such as business information query requests, business information modification requests, etc. After receiving the operation request, the database system executes the database operation steps corresponding to the operation request, so as to obtain the operation result and return it to the user. [0003] However, some malicious programs can conduct network attacks on the database system in order to illegally obtain business information from the database system. A specific method of network attack is that the malicious program uses the vulnerability of the user client to inject malicious database operation statements into the operati...

AI Technical Summary

Problems solved by technology

[0003] However, in order to illegally obtain business information from the database system, some malicious programs can conduct network attacks on the database system.

A specific method of network attack is that the malicious program uses the vulnerability of the user client to inject malicious database operation statements into the operation request sent by the client. When the database system processes the operation request, it will execute the maliciously injected database operation statement. subject to cyber attack

Images