Database security risk assessment system

Abstract

The invention discloses a database security risk assessment system. The system comprises a risk assessment engine, a server-side SQL (Structured Query Language) abnormal risk assessment module, an intranet node SQL abnormal risk assessment module, a basic risk assessment module, a vulnerability library and a historical assessment recording module, the risk assessment engine is used for scheduling the server-side SQL exception risk assessment module, the intranet node SQL exception risk assessment module and the basic risk assessment module and respectively executing server-side SQL exception risk assessment of the first round, intranet node SQL exception risk assessment of the second round and basic risk assessment of the last round, the vulnerability library is used for storing known database vulnerabilities and web server vulnerability, and the historical assessment recording module is used for storing evaluation history record data. According to the system, database security risk assessment is more comprehensive and objective.

Description

technical field [0001] The invention relates to the technical field of network space security, in particular to a database security risk assessment system. Background technique [0002] Database is the core component of various current network application systems, recording key business data in the system. However, various known and unknown attacks against databases emerge in an endless stream, seriously threatening the security of network database information systems. At present, the common vulnerabilities of the database include: unknown vulnerabilities of the database system, or known vulnerabilities that have not been fixed, weak passwords of users and system administrators, SQL injection attacks, server host security vulnerabilities, intranet security threats, inappropriate database configuration Wait. These security vulnerabilities often pose serious security risks. [0003] At present, widely used database security inspection tools, such as OScanner, Scuba, BSQL Ha...

AI Technical Summary

Problems solved by technology

[0006] 1) Traditional database security risk assessment systems rely on prior knowledge such as known security vulnerabilities, SQL injection features, and misconfiguration options to assess the security risks of the target database system. In the absence of prior knowledge, it is difficult to assess the database Evaluate potential unknown security risks of the system;

[0007] 2) The traditional risk assessment process only focuses on the current vulnerability of the target system to be assessed. Indicators such as log alarm analysis and password test results are scored according to predetermined scoring standards and the final score is fused, ignoring the information from the network. The impact of the security threat of the internal network of the database system on the current database security risk leads to the one-sidedness of the assessment results;

[0008] 3) The traditional database security risk assessment model lacks self-learning and self-adaptive capabilities. It adopts a unified and fixed detection model for risk assessment of all target systems, and it is difficult to dynamically adjust according to the changes in the application environment of the database system itself.

Images