Research on database security and protection system
Yang Xiao · Journal of Zhejiang University(Engineering Science) · 2002
The Database Security and Protection System (DSPS) is capable of countering malicious DBMS and is proposed based on the malicious DBMS's threat model and the requirements of concerned government departments.The authentication module of DSPS maps the user's identity to user account in untrusted DBMS through principal mapping. The access control module of DSPS enforces tuple level MAC through Integrity lock and enforce attribute level MAC through SQL commands parsing and controlling. The object mapping can prevent triggering of the malicious access control codes by removing the semantic information from object names. Furthermore, in order to counter semantic malicious behavior of untrusted DBMS, built in trusted DBMS form a parallel structure together with the untrusted DBMS. DSPS greatly improve the capability of information systems to malicious DBMS.