基于角色访问的非冗余数据库容侵结构  

Architectures for Intrusion Tolerant Databases Based on Role-Based Accesss Control

作　　者：邓伟[1] 吴中福[1] 叶春晓[1] 钟将[1] 

机构地区：[1]重庆大学计算机学院,重庆400044

出　　处：《计算机科学》2006年第6期112-114,134,共4页Computer Science

摘　　要：在数据库受到攻击的情况下,保证关键业务的持续服务和动态恢复入侵造成的破坏是非常重要的问题。当前很多中小型网络数据库并无冗余机作为后备,但又必须采用容侵机制来保证其可用性和安全性,所以本文提出了一个基于角色访问的非冗余容侵数据库结构。该结构能通过隔离执行关键数据来提供不间断的关键业务服务;对于入侵能够在线进行自动恢复;根据用户的角色、历史记录和容侵要求,自动进行状态迁移和系统参数调节等。In face of attacks,it＇s very important for database system to protect the key data from intrusions and dynamically locate and repair the damage caused by the intrusions. Nowadays, lots of medium and mini-type network databases have no redundancy to guarantee their availability and survivability. Under the circumstances, we propose a intrusion tolerant database architecture which is of no hardware redundancy revolved and base on the role-based access control. The architecture can provide uninterrupted important services by executing key data in isolated places, can automatically recover the damage on the fly,and can self-transfer the system states and also self-regulate the system parameters base on the users＇ roles,history logs and the requirements of intrusion tolerance etc.

关 键 词：容侵 控制访问 角色 数据库 

分 类 号：TP311.13[自动化与计算机技术—计算机软件与理论]