Method for analyzing and restoring SQL commands and parameters of Shentong database

Abstract

The invention discloses a method for analyzing and restoring SQL (Structured Query Language) commands and parameters of a Shentong database, which comprises the following steps: acquiring data packetsthrough a bypass, filtering to obtain interactive data of the Shentong database, and executing corresponding analysis and restoration processes according to different data packet types to obtain SQLcommand and parameter contents, and comprises the following steps of: circularly acquiring interactive data packets of a Shentong database protocol; analyzing the data packet to obtain application layer data of the data packet, extracting contents of first two bytes of an application layer data body, and judging the type of the data packet according to byte values; for different data packet types,respectively executing corresponding analysis processes, analyzing and extracting SQL commands and parameters, and filling the SQL commands and parameters into a reduction list; and implementing database auditing.

Description

technical field [0001] The invention belongs to the technical field of computer and network security, and in particular relates to a method for parsing and restoring SQL commands and parameters of a magical database. Background technique [0002] With the wide application of databases, the necessity of data protection and operation monitoring also needs to be gradually enhanced. More users mean that database systems need higher security, reliability, confidentiality, controllability and traceability. Database auditing is the most important and most effective way, which is to achieve auditing by recording various operation instructions and corresponding operation results when the client accesses the database. By analyzing and recording information such as the content of various operating instructions, operating users, instruction sending time, and the impact of instructions, it is possible to determine whether the security of the database is threatened; at the same time, it i...

AI Technical Summary

Problems solved by technology

However, for relatively new domestic databases such as Shentong database (also known as OSCAR database), the implementation details of this analysis rule are not disclosed and difficult to obtain. Although it has been gradually applied in various businesses, there is still a lack of corresponding perfect Parsing restore methods, making effective security auditing impossible

Images