基于内核检测的数据库漏洞扫描器的设计与实现  

Design and Implementation of Kernel Detecting Based Database Vulnerability Scanner

作　　者：张驯[1] 马之力[1] 智勇[1] 朱小琴[1] 龚波[1] 李志茹[1] 

机构地区：[1]国网甘肃省电力公司电力科学研究院,甘肃兰州730050

出　　处：《电力信息与通信技术》2016年第8期38-41,共4页Electric Power Information and Communication Technology

摘　　要：通过对数据库业务的安全性能分析发现,面向应用及其后台数据库的应用级入侵问题已经日益泛滥,尤其对数据库中重要数据的窃取和篡改最为常见。为了保证数据库的安全,及时检测出数据库系统的安全漏洞,文章设计出一种基于内核入侵检测机制的数据库漏洞扫描器。该扫描器能够深入分析数据库内核,实时检测黑客的入侵行为,从而防止数据库系统被入侵后导致数据泄露及恶意篡改现象的发生,进一步提升数据库系统的安全性。According to the security performance analysis of the database services, application-level intrusions of application oriented and backend database have become more and more serious. Especially the theft and tampering of invasion of the database is the most common. Therefore, this paper presents a kernel intrusion detection mechanism based database vulnerability scanner, which can give an in-depth analysis of the database kernel and detect the intrusions behaviors of hackers timely. Thereby it can efficiently prevent the database intrusion that cause data leakage and malicious tampering, enhance the security of the database system.

关 键 词：数据库安全 内核入侵检测 漏洞扫描器 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]