A database protection system aiming at SQL attack

摘要：

many websites on the internet are based on database, especially websites which use database to display the pages actively such as ASP, PHP and JSP. However, because of SQL attack, people pay much attention to the security of database on the internet. Different from many protection systems deployed between web servers and internet, this article designed a database protection system between web server and database server. It parses network and database protocol of the packets passing through, and extracts the SQL statements, then analyzes and filters the SQL statements, so it protects the database effectively on the application layer and its effectiveness is independent of any particular target system, application environment, or DBMS. Even there is no need to modify the source code of existing web applications. This system has been carried out in application and has good effect.

关键词： SQL attack protocol analysis database protection

作者: Deng Liwu Xu Ruzhi Jiang Lizheng Lv Guangjuan

作者单位: School of Computer Science & Technology North China Electric Power University Beijing,China

会议类型: 国际会议

会议名称: The Fifth International Conference on Information Assurance and Security(第五届信息保障与安全国际会议)

会议地点: 西安

会议语种:英文

页码: 655-657

在线出版日期: 2009-08-18（万方平台首次上网日期，不代表论文的发表时间）