Author Login Chief Editor Login Reviewer Login Editor Login Remote Office

Computer Engineering ›› 2006, Vol. 32 ›› Issue (8): 176-177,262.

• Security Technology • Previous Articles     Next Articles

Architecture for Database Security Based of Multi-layer Intrusion-tolerance

HE Wei1, SUN Yuhai2, SHA Xuejun1, MENG Lirong2   

  1. 1. Communication Institute, Harbin Institute of Technology, Harbin 150001;2. School of Computer Science and Technology, Shandong University, Jinan 250061
  • Online:2006-04-20 Published:2006-04-20

基于多级入侵容忍的数据库安全体系结构

何 伟 1,孙玉海2,沙学军1,孟丽容2   

  1. 1. 哈尔滨工业大学通信所,哈尔滨 150001;2. 山东大学计算机科学与技术学院,济南 250061

Abstract: This paper adopts multi-layer security model, integrates redundancy and variety architectures, makes use of integral security strategy and server-oriented intrusion tolerance architecture, realizes the survive and availability of database and the integrity and confidentiality of sensitive data. It can effectively resist malicious attacks with legal identity, and reduce the cost of security

Key words: Intrusion tolerance; Database security; Redundancy; Transaction tolerance

摘要: 多级入侵容忍数据库采用多级安全体系结构,将冗余和多样性技术相结合,采用整体安全策略及面向服务的入侵容忍技术,实现数据库的可生存性、可用性及关键数据的机密性、完整性。与其他入侵容忍数据库相比,文中提出的数据库安全体系结构能有效抵御来自于OS 级、DBMS 级以及事务级的恶意攻击,同时降低了安全成本。

关键词: 入侵容忍;数据库安全;冗余;事务容忍