基于Oracle触发器的后门隐藏技术研究  

Research Backdoor Hidden Technology Based on Oracle Trigger

作　　者：袁梁[1] 

机构地区：[1]无锡城市职业技术学院,江苏无锡214000

出　　处：《淮阴师范学院学报（自然科学版）》2015年第3期238-242,共5页Journal of Huaiyin Teachers College;Natural Science Edition

摘　　要：基于云计算环境下网络攻击与防御技术的研究,对传统后门隐藏方式进行分析,提出了一种基于Oracle触发器的后门隐藏技术.通过在当前Oracle账户下指定的触发器中插入Java存储过程调用语句块,当业务系统发生特定操作行为时,触发Java存储过程调用语句块的执行,达到通过Java存储过程调用外部程序的目的,从而启动潜伏于操作系统中的后门程序,而在业务系统正常的业务操作过程中,触发器执行自身应有功能,后门程序保持长期静态潜伏.通过针对该后门隐藏技术实现原理的深入分析,找到了有效的防御措施.Because of oracle cloud computing technology occupying an important seat in the cloud computing market and the feature of oracle database in the basic position of the oracle cloud computing infrastructure so-lutions, We put forward a backdoor hidden technology based on oracle trigger for new attack and defense tech-nology research in cloud computing environments. in short, we insert java stored procedure call statement block in specified trigger under the current oracle account, when the certain operation is taking place in the in-formation system, the java stored procedure call statement block is running because of the oracle trigger, and for the purpose of executing external program through the java stored procedure, so the backdoor program is running which is hiding in the operation system, otherwise when we do the normal operation in the information system, the trigger perform the original job, and the backdoor is taking long time static latent.

关 键 词：Oracle云计算 存储过程 ORACLE触发器 后门隐藏 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]