A New Database Intrusion Detection Approach Based on Hybrid Meta-Heuristics  

作　　者：Youseef Alotaibi 

机构地区：[1]Department of Computer Science,College of Computer and Information Systems,Umm Al Qura University,Makkah,21421,Saudi Arabia

出　　处：《Computers, Materials & Continua》2021年第2期1879-1895,共17页计算机、材料和连续体（英文）

摘　　要：A new secured database management system architecture using intrusion detection systems(IDS)is proposed in this paper for organizations with no previous role mapping for users.A simple representation of Structured Query Language queries is proposed to easily permit the use of the worked clustering algorithm.A new clustering algorithm that uses a tube search with adaptive memory is applied to database log files to create users’profiles.Then,queries issued for each user are checked against the related user profile using a classifier to determine whether or not each query is malicious.The IDS will stop query execution or report the threat to the responsible person if the query is malicious.A simple classifier based on the Euclidean distance is used and the issued query is transformed to the proposed simple representation using a classifier,where the Euclidean distance between the centers and the profile’s issued query is calculated.A synthetic data set is used for our experimental evaluations.Normal user access behavior in relation to the database is modelled using the data set.The false negative(FN)and false positive(FP)rates are used to compare our proposed algorithm with other methods.The experimental results indicate that our proposed method results in very small FN and FP rates.

关 键 词：Adaptive search memory clustering database management system(DBMS) intrusion detection system(IDS) quiplets structured query language(SQL) tube search 

分 类 号：TP3[自动化与计算机技术—计算机科学与技术]