Abstract: Aims at actual malicious tampering with data after upgrading privilege by the way of making use of exploits in DBMS,the paper designs a new application of database trigger to build a new access control function based on pre-attacked in order to improve database security,and to change the actual status that now protecting database rely on restore post-attacked in a way.

摘要： 针对目前大量利用数据库漏洞提升用户权限后的恶意篡改攻击,设计并实现了一种新的触发器应用,基于安全事件发生前或发生过程中构建了一层用户自定义的访问控制功能,提高了数据库的安全性,并在一定程度上,改变了目前数据库保护中主要依赖于事后恢复的局面。

关键词: 触发器, 数据库安全, 访问控制

CLC Number: 

• TP311.13