Data access control method and system based on mimicry defense

Abstract

The invention discloses a data access control method and system based on mimicry defense, and is applied to the technical field of network security. The method comprises the steps that a user initiates a request to a data access control system, a view layer processes the request, a control layer calls a control layer heterogeneous execution body, a mimicry judgment layer I judges an access permission processing result, a data access layer calls a data access layer heterogeneous execution body, and a mimicry judgment layer II judges a data access processing result and sends the data access processing result to the user. According to the method, mimicry is carried out on the access control strategy, hackers can be effectively prevented from attacking an access control strategy, meanwhile, mimicry is carried out on the data access layer, the hackers can be effectively prevented from attacking a database, and therefore the stability of the system can be prevented from being damaged, and the robustness and safety of the system can be further improved.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a data access control method and system based on mimic defense. Background technique [0002] The basic principle of mimic defense technology is: when there is a message input, it is transmitted to each heterogeneous executive in the heterogeneous pool through the input agent, and all heterogeneous executives process the message and transmit the result to the multi-mode arbitration module. If the result is consistent, then If the output is inconsistent, it is possible to identify the abnormal output message of a certain executive body, and then realize the security defense of the system. [0003] Access control technology has always been an important means to protect data security. It mainly uses preset access control policies to ensure that users with different permissions can only access information with corresponding permissions and prevent illegal access to informati...

AI Technical Summary

Problems solved by technology

[0004] Technical purpose: Aiming at the defect that the security of the data access control system in the prior art cannot be greatly improved, the present invention discloses a data access control method and system based on mimicry defense, which mimics the access control strategy and can effectively Prevent hackers from attacking an access control strategy, and at the same time, mimic the data access layer, which can effectively prevent hackers from attacking a database, thereby destroying the stability of the system, and further improving the robustness and security of the system sex

Images