基于多级入侵容忍的数据库安全解决方案  

Solution of security database based on multi-layer intrusion tolerance

作　　者：孙玉海[1] 孟丽荣[1] 

机构地区：[1]山东大学计算机科学与技术学院,山东济南250061

出　　处：《计算机工程与设计》2005年第3期694-696,共3页Computer Engineering and Design

摘　　要：传统的数据库安全解决方案的缺点是不能很好地解决以合法身份进行的恶意攻击,对具有不同安全需求的用户,只能提供固定的安全级别,造成资源浪费。它采用多级安全模型,即“用户+ OS + DBMS +事务级入侵容忍”,将冗余和多样性技术相结合,采用整体安全策略及面向服务的入侵容忍技术,实现数据库的可生存性、可用性及关键数据的机密性、完整性,能有效抵御以合法身份进行的恶意攻击,降低安全成本。The traditional solution of database security has a drawback, that is , they can not deal with malicious attacks with legal identity. And they are in general not cost-effective to user who has different security requirements. It adopts multi-layer security model, namely 'user+OS +DBMS +transaction-layer intrusion tolerance', integrates redundancy and variety architectures, makes use of integral security strategy and server-oriented intrusion tolerance architecture, realizes the survive and availability of database and the integrity and confidentiality of sensitive data, can effectively resist malicious attacks with legal identity and reduces the cost of security.

关 键 词：入侵容忍 数据库安全 恶意攻击 安全级别 多级安全模型 事务 面向服务 用户 技术 合法 

分 类 号：TP393[自动化与计算机技术—计算机应用技术] TP309[自动化与计算机技术—计算机科学与技术]