149 results about "Database security" patented technology

The invention relates to the technical field of electrical safety, in particular to an electrical operator behavior analysis and safety risk prevention and control system which comprises a behavior data acquisition module, a data preprocessing module, a behavior analysis module, a historical risk database, a safety risk assessment module and a real-time early warning module. Wherein the behavior data acquisition module is used for acquiring behavior data and environment data of operating personnel; the behavior analysis module is used for constructing a behavior recognition model; the security risk assessment module is used for performing multi-dimensional risk assessment; the real-time early warning module is used for sending out early warning signals in various forms; according to the invention, through combination of accurate behavior feature identification, multi-dimensional risk assessment and a dynamic early warning technology, the problems of insufficient real-time monitoring of operation behaviors, incomplete risk assessment and untimely early warning response in the prior art are solved, and the safety and risk prevention and control capability in the electrical operation process are improved.

The invention relates to the technical field of database security, and discloses an MCP and agent-based heterogeneous database security access and report generation method, which comprises the following steps of: receiving a task request, acquiring a task context, synchronizing capability declarations from a plurality of database adapters according to the MCP, generating a capability graph and determining a capability version identifier; performing semantic mapping to obtain a strategy inline rewriting rule and a rewriting abstract fingerprint; the method comprises the following steps: signing and issuing a minimum permission access token, generating cross-source query, performing forced rewriting according to a strategy inline rewriting rule in a compilation stage, verifying consistency, processing an original result to obtain a purified result, only allowing to read a generated report from a buffer area of the purified result under the constraint of a structured mode template, and calculating a report fingerprint at the same time. And writing a chained audit log, fixing the audit log, and verifying report reproduction based on the audit log. According to the method and the system, minimum access, unauthorized prevention and control, compliance audibility and result reproducibility are realized.

The invention discloses a database abnormal behavior detection method and device, electronic equipment and a storage medium, and relates to the technical field of database security analysis, the method comprises the following steps: obtaining an operation log of a target database, and generating an operation embedding feature based on an operation record of the operation log; generating an operation feature sequence based on a recording sequence of operation records corresponding to the operation embedding features; processing the operation feature sequence according to an attention model to obtain a semantic feature sequence after intention weight adjustment; and determining an abnormal semantic proportion in the semantic feature sequence based on the abnormal behavior detection model, and generating an abnormal behavior detection result of the target database based on the abnormal semantic proportion. According to the embodiment of the invention, the operation feature sequence is generated based on the record sequence, the attention model is utilized to focus on the important features of the operation feature sequence, the recognition precision of the abnormal behaviors is improved, and the false alarm rate and the missing report rate are reduced by calculating the abnormal semantic proportion and accurately quantifying the proportion of the abnormal behaviors.

The invention provides a database anti-ransomware method and device based on user SQL (Structured Query Language) feature behavior analysis, and relates to the technical field of database security. The method comprises the following steps: constructing an SQL data set by utilizing a multi-source data aggregation algorithm, a real-time and historical combination algorithm and a data cleaning and checking algorithm; extracting SQL statement structure features according to BERT and a semantic matching method; according to the features, training a user SQL behavior model based on a Transform; in the real-time monitoring stage, a monitoring engine captures a new SQL operation in real time, rapidly extracts features and inputs the features into the trained behavior model for evaluation. Once the deviation between the operation and a normal behavior model exceeds a preset threshold value and suspicious behavior modes such as data encryption, large-scale data deletion or abnormal high-authority operation similar to ransomware are presented, an alarm mechanism is triggered immediately, and a preset protection strategy is executed automatically, so that data loss and business influence are reduced to the greatest extent.

The invention relates to the technical field of data security and storage, and discloses a data storage method for database security audit data, comprising the following steps: preprocessing security audit data in a database; the security audit data is encrypted by adopting a homomorphic encryption technology, and the homomorphic encryption technology supports execution of arithmetic operation of addition and multiplication on the encrypted data and can execute query operation on the encrypted data; carrying out compression optimization storage on the encrypted data; and managing the user permission according to the access control strategy. According to the method, a homomorphic encryption technology is adopted, direct calculation and analysis are supported in a data encryption state, potential safety hazards in a decryption process are solved, data privacy protection and processing safety are improved, and ciphertext query efficiency is improved; real-time monitoring is realized in combination with dynamic authority management; low-density parity check coding is adopted, encrypted data storage and fault-tolerant recovery are optimized, and the problems of storage resource waste and insufficient flexibility are solved.

The invention relates to a whole mine safety situation analysis and evaluation system and method, and belongs to the technical field of coal mine safety production and management. The system comprises a basic data informatization module, a security big data center module, a professional dimension scoring module, a spatial dimension scoring module and a risk visualization analysis module. The basic information informatization module is used for establishing a basic information informatization database according to professions based on a coal mine safety production standardization management system; the security big data center module is used for integrating multi-source heterogeneous data, namely managing, monitoring and analyzing data, and establishing a data unified interaction standard; the professional dimension scoring module is used for carrying out risk assessment by adopting a security check table method for each professional field; and the spatial dimension scoring module is used for realizing automatic, real-time and quantitative evaluation based on quasi-static and dynamic monitoring data by adopting a virtual object situation-based scoring method for typical scenes. According to the invention, the whole mine overall risk and local key area safety risk evaluation can be realized.

Exemplary embodiments for data security include a data access proxy coupled with a database, further coupled with a server configured to operate the data access proxy to: identify a user and request to access a data item; validate the user and request, including inspecting the user's identity, evaluating the user's history, and evaluating permissions and restrictions associated with the user and the data item; access the database to retrieve the data item; inspect security attributes related to the data item; and transform the data item based on one or more privacy rules, including redacting the at least one data item, deleting information from the at least one data item, substituting information from the at least one private data item with other information, adding information to the at least one data item, providing synthetic data as a private data item, or providing proxy data for the data item.

The invention discloses a method and device for realizing integrity protection of sensitive data of a database, and belongs to the technical field of database security, and the method comprises the following steps: identifying sensitive data of a key column of a data table in a target database through an encryption system, and recording the sensitive data as key data; integrity protection is configured for the key data, and a digital signature is applied; the method comprises the following steps: calculating an abstract value of key data by using an SM3 hash algorithm, and calculating related sensitive information of the current key data and an MAC value of a system key at the same time; the database service system accesses the key data through the proxy connection of the encryption system, data modification or new data insertion is carried out, that is, a service user carries out data entry and storage; the encryption system compares whether the MAC value of the related sensitive information of the current key data is consistent with the MAC value of the related sensitive information of the last key data, and returns a comparison result to the system; and displaying a data state corresponding to a comparison result returned by the system on a system web page.

The invention relates to the technical field of database security, and discloses an account number dynamic monitoring management system based on a data transmission protocol, and the system comprises a protocol analysis module which is used for analyzing a specified communication protocol of a specified database, and extracting key information related to a privileged account number; the privileged account dynamic discovery module dynamically discovers all privileged accounts in a specified database; the behavior anomaly detection module is used for analyzing behaviors of the privileged account, constructing a behavior baseline of the privileged account and identifying risk operation of the privileged account; the dynamic response module is used for providing a targeted safety protection strategy after the risk operation is found; the method comprises the following steps: analyzing a specified communication protocol of a specified database, extracting a login authentication process of a privileged account in the analyzed communication protocol, identifying account behaviors in real time, dynamically discovering the changed privileged account, analyzing the privileged account behaviors by adopting an AI technology, and after risk operation is discovered, combining with a security configuration item of the specified database, so as to realize the security authentication of the privileged account. A proper safety protection strategy is automatically adopted, and threat influence is reduced.

The embodiments of the present application provide a database security protection method, device, system, storage medium and electronic device, and the database security protection method includes: receiving a database access request sent by an application server; wherein the database access request carries target five-tuple information related to the target user device, and the target five-tuple information is five-tuple information of access data from the target user device to the application server; detecting whether there is an attack behavior in the database access request; if it is determined that there is an attack behavior in the database access request, extracting the target five-tuple information from the database access request, and sending the target five-tuple information to the application server protection system, so that the application server protection system can block the target user device from accessing the database according to the target five-tuple information. With the help of the above technical solution, the embodiments of the present application can achieve accurate blocking of threatening user devices, and thus can also improve the security of the database.

The invention relates to a database security authentication method based on multiple factors. The method comprises the following steps: configuring multiple security authentication modes; configuring a mobile phone number of a manager and enterprise USB key account information, and setting an authorization code validity period; storing the plurality of security authentication modes; and the corresponding security authentication mode is called according to the sensitivity level of the data and the use scene, so that the database access security is improved, the user can flexibly select the authentication mode according to the scene and the data sensitivity, and diversified security requirements are met.

The invention relates to the technical field of database security, in particular to an SQLite database transparent encryption method, system and device based on a national cryptographic algorithm and a storage medium, and the method comprises the following steps: S1, when an SQLite database is opened, loading and connecting a hardware cryptographic device to obtain an encryption master key and a corresponding key handle; s2, in response to the write-in operation, calling a national secret symmetric encryption algorithm through a key handle, encrypting a plaintext of a database page to generate a page, and writing the page into a database file; s3, reading the ciphertext page in response to the reading operation, decrypting the ciphertext page through a cryptographic symmetric decryption algorithm adjusted by a key handle after analysis, recovering a plaintext page and returning the plaintext page to the application; and S4, circularly executing encryption writing and decryption reading to process the continuous request, and releasing the key handle and disconnecting the hardware connection until the database connection is closed. According to the method, transparent full disk encryption, meeting the national secret standard, of the SQLite database is achieved, the secret key safety and the operation performance are guaranteed through hardware cryptographic equipment, and good application compatibility is kept.

The invention relates to the technical field of communication, in particular to a database security protection method, which comprises the following steps of: mirroring and copying database traffic by adopting a switch port; performing deep protocol analysis on the database traffic to obtain analyzed data; performing real-time threat detection on the analyzed data to obtain a detection result; and performing security protection on the database based on the detection result. According to the method, through technical fusion of deep protocol analysis and real-time threat detection, accurate protection and dynamic defense of the database can be realized, systematic defects in the aspects of performance loss and the like are reduced, and double breakthrough of safety and availability is realized.

The invention relates to the technical field of database security and anomaly detection, in particular to a database access anomaly detection method based on semantic vector and graph embedding, which is characterized by mainly comprising the following steps: preprocessing a data set, and extracting semantic units in the data set; a Word2Vec model is adopted to train the semantic unit, and a semantic vector of the SQL statement is generated; constructing a heterogeneous information graph taking a user, an operation type and a database table as nodes; establishing an undirected edge based on an entity association relationship, taking an association frequency as a weight, and taking a semantic vector as a node initial feature of the heterogeneous information graph; adopting a graph attention network GAT as a graph embedding algorithm to train the heterogeneous information graph, and generating a graph embedding feature corresponding to each database access statement; the graph embedding features are grouped according to a database table, and a sliding window is adopted to generate a corresponding time sequence; inputting the time sequence into the LSTM network, jointly optimizing graph embedding loss, time sequence modeling loss and regularization loss based on a designed total loss function to complete model training, and outputting time sequence features; and calculating the similarity between the output time sequence characteristics and the real image embedding characteristics, and judging whether the corresponding SQL operation is an abnormal operation or not according to a comparison result of the similarity and a threshold value. According to the method, SQL semantics, entity association and time sequence dependence multi-dimensional information can be fully fused, the accuracy and recall rate of anomaly detection are effectively improved, and reliable support is provided for database security protection.

The embodiment of the invention discloses a database integrity verification method and device based on an operation behavior and a medium, and relates to the technical field of databases, the method comprises the steps that database operation is monitored in real time to extract database operation information, the database operation information comprises an operation type, operation data and an operation context, and the operation type is determined according to the operation type, the operation data and the operation context; the operation context comprises a user identifier, a session identifier and a timestamp; according to the operation data and the operation context in the database operation information, generating a dynamic data fingerprint corresponding to the database operation, and writing the dynamic data fingerprint into the secure storage area; and performing database operation risk assessment based on the database operation information and the dynamic data fingerprints to determine current operation risk information, and performing hierarchical response on database operation through the current operation risk information to realize database integrity verification. Traditional static data verification is upgraded into a security protection mode of dynamic behavior perception, and database security protection is realized through multi-level technology fusion.

The invention provides a method for performing data processing on a plurality of list sets by using SQL statements. The method comprises the following steps of S1, receiving request parameters and verifying the request parameters; s2, storing the data in the list set into a user-defined memory database; s3, checking the SQL statement; s4, the SQL statement is analyzed, and SELECT information is obtained; s5, a SELECT statement in the SELECT information is analyzed, and SQL grammar information is obtained; s6, processing the data according to the SQL grammar information; s7, returning final result data; the problem that data processing of multiple List list sets is difficult is solved, connection with a database server is not needed based on a flexible data processing mode of the SQL language and a mode of creating the user-defined memory database, the database security problem does not exist, high concurrency is supported, efficiency is improved, complex data processing is achieved, and the method is suitable for large-scale popularization and application. SQL statements are modified and updated at any time according to requirements, and time and labor are

The embodiment of the invention discloses a database security situation assessment and prediction method based on a multi-dimensional index, and the method comprises the steps: constructing a multi-level index system, collecting the asset data and operation data of a target database, determining the first weight of the asset data and the second weight of the operation data based on a dynamic weight rule, calculating a database security value through a situation assessment model, obtaining predicted asset data and predicted operation data of a target database through a situation prediction model, and calculating a database predicted security value through the situation assessment model; and based on the database safety value and the database prediction safety value, according to an early warning rule, initiating early warning. The method covers multi-dimensional security data of the database, adopts a dynamic weight rule, adapts to different application scenes and threat environments, can effectively improve the accuracy and adaptivity of database security situation assessment, and improves the perspectiveness of database security protection through cooperation of a prediction mechanism and an early warning mechanism.

The invention relates to the technical field of database security, and discloses a zero-knowledge proof layer-based data query verification method, which comprises the following steps of: constructing a column type sparse commitment tree according to each column of data of a database table; acquiring a query request initiated by a client, and performing query processing on the query request according to the columnar sparse commitment tree to generate a query instruction; executing the query instruction in a fully encrypted environment, and generating a ciphertext query result packet and a proof fragment set; inputting the proof fragment set into a zero-knowledge proof layer of a GPU acceleration engine, and outputting zero-knowledge proof; and performing structured packaging on the ciphertext query result packet and the zero-knowledge proof, and feeding back the packaged ciphertext query result packet and the zero-knowledge proof to the client. According to the method, storage is optimized through the array type sparse commitment tree, verification is generated in parallel through the GPU, multi-class query verification is supported, and data privacy and query reality are guaranteed.

The invention discloses a database security management and control system based on storage encryption, which relates to the technical field of storage encryption and comprises a user access control module, an authority management module, a data encryption module, a data decryption module, a key access control module and a backup recovery module. The user access control module is responsible for verifying a user identity; through the data encryption module and the key access control module, in combination with an asymmetric encryption technology, sensitive data in a database are ensured to be always in an encrypted state in a storage process, the sensitive data are encrypted by adopting an RSA algorithm, and the data cannot be read even if being stolen in the storage process, so that the security of the data is ensured. According to the method, the system periodically turns keys and high-strength management of the keys, the keys are prevented from being leaked or abused, data are effectively protected from being accessed by unauthorized users, and the life cycle management of the keys, including generation, use, rotation and destruction operations, is performed through an AWSKMS tool, so that high-strength protection of the keys is ensured.

The invention discloses a computer database security evaluation system and method. The system comprises a data acquisition module, an evaluation integration module, an evaluation scoring module, a user access simulation module and a report generation module. In combination with measures of user access behavior simulation and key leakage prevention, it is ensured that a key cannot be leaked in the evaluation process, and abnormity of permission configuration is effectively evaluated; by simulating user access behaviors of different roles and dynamically evaluating authority distribution of the database, it is ensured that each role in the database can only access resources needed by the role, authority abuse and excessive authorization are avoided, the authority problem in the database can be detected and evaluated in real time, and meanwhile, the user experience is improved. By establishing the test environment and establishing the distribution permission for the test personnel, the risk problem of key and data leakage possibly existing in database security evaluation can be prevented.

The invention discloses a dynamic desensitization method and device for an enterprise database, equipment and a storage medium, and relates to the technical field of database security, and the method comprises the following steps: deploying a pre-trained target SQL semantic analysis model, and intercepting a to-be-queried SQL statement sent by a client; parsing statement information corresponding to the to-be-queried SQL statement by using a target SQL grammar parser; if the analysis fails, identifying a target query intention corresponding to the to-be-queried SQL statement by using the target SQL semantic analysis model, and determining a target risk level corresponding to the to-be-queried SQL statement based on the target query intention; and if the target risk level corresponding to the to-be-queried SQL statement is a preset high risk level, intercepting query of the to-be-queried SQL statement on a target enterprise database, and returning corresponding interception information. According to the method and the device, the sensitive information can be accurately protected in the access process of the enterprise database.

The invention relates to the technical field of database security, and discloses a secure access method for a database, comprising: receiving an access request sent by a client for a target database, and generating device verification data and user verification data; presetting a database comparison table and a user password comparison table; performing preliminary verification on the equipment verification data based on the database comparison table, performing final verification on the user verification data based on the database comparison table and the user password comparison table, and if the final verification is passed, allowing the client to access the target database; and if the preliminary verification or the final verification is not passed, obtaining a temporary access application form of the database management end, performing secondary verification on the equipment verification data and the user verification data based on the temporary access application form, and if the secondary verification is passed, allowing the client to access the target database. Through a multi-verification mechanism, the risk that illegal users access the database is greatly reduced, and the security of database access is effectively improved.

The invention provides a database security detection method and system for password protection, and relates to the technical field of password detection and the technical field of data security. Technical data adopted by a database are collected, and data stream security testing, log record detection and password update detection are executed respectively; when the test or the detection is not passed, outputting an alarm and corresponding unsafe information; wherein the data stream security test comprises security authentication security detection, communication security detection, data storage and reading security detection, data label security detection and password detection; the method is specially used for security detection of database protection based on the password technology, and each security link of the database is deeply integrated, so that the blank of password protection mechanism detection in the existing database security protection technology is filled through the detection; the reliable security detection method and detection system are provided for a data system with high security requirements, and compared with the existing password test, the reliable security detection method and detection system have higher security proving capability and can be expanded to other systems which use password protection to carry out unified management and use on data.

This invention provides a database security system and its management method, relating to the field of electronic digital data processing technology. The invention aims to address the problems of existing database security technologies, which suffer from insufficient ability to identify complex and covert attacks and a high false alarm rate due to their single monitoring dimension and lack of cross-domain correlation analysis capabilities. By introducing an innovative cross-domain anomaly collaborative analysis mechanism, this invention can achieve synchronous cross-verification of attack "intent" and attack "methods," thereby significantly improving the predictive identification capability and accuracy of advanced threats while greatly reducing security false alarms caused by normal business fluctuations or system jitter, thus enhancing the intelligence level and reliability of the entire database security system.

The application discloses a database encryption control method and system based on micro services, and relates to the technical field of distributed database security; a password device distribution service, a certificate key management service and a dynamic load balancing service are created according to a micro service architecture; the password device distribution service distributes password devices when the password devices are applied to be used by the outside world, and provides a calling interface; the certificate key management service uniformly manages certificates and keys in the password devices, and can migrate the certificates and the keys between the password devices; and the dynamic load balancing service dynamically distributes the password devices to nodes according to usage information of the nodes on the password devices.

The present invention provides a database security control method, apparatus, electronic device, and storage medium, including: sending database operation and maintenance instructions through a database operation and maintenance tool, and after the database soft switch performs security control on the database operation and maintenance instructions, forwarding them to the database; the database soft switch uses a similarity cycle analysis algorithm to simulate the database, enabling the database to perform session keep-alive communication with the database operation and maintenance tool; calling the operating system kernel, and using a multi-threaded mechanism and a fast read-write data cache queue to perform network traffic collection and analysis. In view of the problem that various database tools need to be customized and developed for database operation and maintenance control, the present invention realizes the centralized control of database operation and maintenance through the database soft switch, without the need to transform the database tools. At the same time, it solves the problem of maintaining the keep-alive of the database tools during the waiting period for the approval of the vault triggered by the instructions, and calls the operating system kernel, uses multi-threading and a fast read-write data cache queue to improve the traffic processing ability, ensuring the operation and maintenance efficiency.

The invention relates to a database connection method and device, computer equipment, a medium and a program product. The method comprises the following steps: acquiring connection request information and global singleton object data from a client, and obtaining a mapping relationship between an elastic public network address and a virtual private cloud address; obtaining an original response result which corresponds to an original main node confirmation command of the client and comprises address information of the replica set node; under the condition that it is determined that the connection request needs to be subjected to elastic public network address replacement according to the connection request information and the global singleton object data, a virtual private cloud address in the original response result is replaced with a corresponding elastic public network address according to the global singleton object data, and a target response result is obtained; and sending the target response result to the client, and establishing connection between the client and each node of the replica set according to address information in the target response result. By adopting the method, the database connection flexibility can be improved on the basis of ensuring the security isolation of the cloud database.

This invention discloses a secure distributed backup method for databases based on secret sharing, relating to the field of database security technology. The method includes: selecting n backup nodes, setting a recovery threshold t, extracting sensitive information from the database, and using a secret sharing algorithm to divide the sensitive information into n shares within the backup nodes; allocating each share to a corresponding backup node for storage; adding a password share to each share stored in each backup node to construct an encrypted share; creating a mapping table based on the correspondence between backup nodes and encrypted shares; receiving a recovery request, retrieving the encrypted share from several backup nodes based on the response request and the mapping table, and decoding the retrieved encrypted share to obtain the sensitive information. This invention ensures data security during the backup process by dividing and encrypting sensitive information in the database and then distributing the divided information across multiple backup nodes.

The application discloses an identity authentication method and device, equipment and medium, and relates to the field of communication, and comprises the following steps: an identity authentication credential in an identity authentication request data packet sent by a database security reinforcement product client is used for identity authentication by a database security reinforcement product server; after successful authentication, a client authentication IP and database management system information are cached to a target list, and an authentication result is returned, so that a target management client sends an access authentication request data packet based on the authentication result; the access authentication request data packet is parsed, database management system information is queried according to the parsed information, and the database management system information is matched with to-be-accessed database management system information; if the matching is successful, the access authentication request data packet is forwarded to the database management system for identity authentication, an identity authentication result is returned to the target management client, and identity authentication is completed. The application realizes double-system authentication of a database security reinforcement product and a database management system.

The invention provides a global digital transformation-oriented database security management system, which relates to the field of electric digital data processing and comprises an intelligent threat detection and protection module, a unified identity and dynamic authority control module, a full life cycle data security protection module and an intelligent operation and maintenance and compliance management module, the intelligent threat detection and protection module is used for realizing intelligent recognition, analysis and automatic protection of database threats, and the unified identity and dynamic permission control module is used for realizing cross-platform identity unified management and controlling dynamic permissions based on context. The full-life-cycle data security protection module is used for covering security protection of the whole process of data creation, storage, transportation, use and destruction, and the intelligent operation and compliance management module is used for providing intelligent operation support and automatic compliance management capability; the system solves the technical problems that a traditional database security system cannot cope with complex and changeable threat environments, lacks personalized modeling ability, is extensive in authority management and the like, and the intelligent level and the adaptive ability of database security protection are remarkably improved.