Database Security Risk Assessment System

Abstract

The invention discloses a database security risk assessment system, comprising: a risk assessment engine, a server-side SQL abnormal risk assessment module, an intranet node SQL abnormal risk assessment module, a basic risk assessment module, a vulnerability database and a historical assessment record module, and the risk assessment The engine is used to schedule the server-side SQL exception risk assessment module, intranet node SQL exception risk assessment module, and basic risk assessment module to perform the first round of server-side SQL exception risk assessment, the second round of intranet node SQL A round of basic risk assessment, a vulnerability library, used to store known database vulnerabilities, and web server vulnerabilities, and a historical assessment record module, used to store assessment history record data; the present invention is more comprehensive and objective in assessing database security risks.

Description

technical field [0001] The invention relates to the technical field of network space security, in particular to a database security risk assessment system. Background technique [0002] Database is the core component of various network application systems, recording key business data in the system. However, various known and unknown attacks against databases emerge in an endless stream, seriously threatening the security of network database information systems. At present, the common vulnerabilities of the database include: unknown vulnerabilities of the database system, or known vulnerabilities that have not been fixed, weak passwords of users and system administrators, SQL injection attacks, server host security vulnerabilities, intranet security threats, inappropriate database configuration Wait. These security vulnerabilities often pose serious security risks. [0003] At present, widely used database security inspection tools, such as OScanner, Scuba, BSQL Hacker, DA...

AI Technical Summary

Problems solved by technology

[0006] 1) Traditional database security risk assessment systems rely on prior knowledge such as known security vulnerabilities, SQL injection features, and misconfiguration options to assess the security risks of the target database system. In the absence of prior knowledge, it is difficult to assess the database Evaluate potential unknown security risks of the system;

[0007] 2) The traditional risk assessment process only focuses on the current vulnerability of the target system to be assessed. Indicators such as log alarm analysis and password test results are scored according to predetermined scoring standards and the final score is fused, ignoring the information from the network. The impact of the security threat of the internal network of the database system on the current database security risk leads to the one-sidedness of the assessment results;

[0008] 3) The traditional database security risk assessment model lacks self-learning and self-adaptive capabilities. It adopts a unified and fixed detection model for risk assessment of all target systems, and it is difficult to dynamically adjust according to the changes in the application environment of the database system itself.

Images