The week's pick
Random Articles
Reseach Article
Database Security Protection based on a New Mechanism
| International Journal of Computer Applications |
| Foundation of Computer Science (FCS), NY, USA |
| Volume 49 - Number 19 |
| Year of Publication: 2012 |
| Authors: Amira Rezk, H. A. Ali, S. I. Barakat |
10.5120/7879-1188
|
Amira Rezk, H. A. Ali, S. I. Barakat . Database Security Protection based on a New Mechanism. International Journal of Computer Applications. 49, 19 ( July 2012), 32-38. DOI=10.5120/7879-1188
Abstract
The database security is one of the important issues that should take a complete attention from researchers. Although applying the traditional security mechanisms, the database still violate from both of external and internal users. So, the researchers develop a Database Intrusion Detection System (DBIDS) to detect intrusion as soon as it occurs and override its malicious affects. The previous work developed a DBIDS as a third party product which is isolated from the DBMS security functions especially access controls. The lack of coordination and inter-operation between these two components prevent detecting and responding to ongoing attacks in real time, and, it causes high false alarm rate. On the other hand, one of the directions that are followed to build a profile is the data dependency model. Although this model is sufficient and related to the natural of database, it suffers from high false alarm rate. This means that it needs an enhancement to get its benefits and eliminate its drawbacks. This Paper aims to strengthen the database security via applying a DBID. To achieve this goal it develops an efficient IDS for DB and integrates it with DBMS for cooperation and completeness between the different parts in the security system. The experiments declare that the proposed model is an efficient DBIDS with a minimum false positive rate (nearly zero %) and maximum true positive rate (nearly 100%). Moreover, it is based on a novel method to build an accurate normal user profile and integrate it with access control.
References
- Elmasri, R. , and Navathe, S. B. 2007. fundamentals of database system, 5th edition, Addison wesley
- Vieira, M. , and Madeira, H. 2005. Detection of Malicious Transactions in DBMS. In Proceeding of the 11th pacific rim international symposium on dependable computing, 350-357
- Kamra, A. , Terzi, E. , and Bertino, E. , "Detecting anomalous access patterns in relational databases". VLDB journal, 17, 5, 2008, 1063-1077
- Clarke, J. 2009. SQL Injection Attacks and Defense. Syngress, Burligton, MA.
- Jin, X. , and Osborn, S. L. , 2007. Architecture for data collection in database intrusion detection systems. In Secure Data Management , Springer-Verlag, Berlin, 96–107
- Liu, P. 2002. Architectures for intrusion tolerant database systems. In Proceedings of the Annual Computer Security Applications Conference (ACSAC'02), 311-320
- Gu, G. , Fogla, P. , Dagon, D. , Lee, W. , and Skoric, B. 2006. Measuring Intrusion Detection Capability: An Information Theoretic Approach. In Proceedings of the ACM Symposium on Information, computer and communications security, 90-101.
- Solomon, G. , and Chapple, M. , 2005. Information Security Illuminated, Jones & Bartlett Learning, USA
- Rezk, A. , Ali, H. A. , Elmikkawy, M. , and Barakat, S. "Database intrusion detection system – A short survey", Accepted for publishing in Mansoura Journal of Computer and Information Sciences (MJCIS).
- Lee, S. Y. , Low, W. L. , and Wong, P. Y. , 2002. Learning fingerprints for a database intrusion detection system. In ESORICS, LNCS, vol. 2502, Gollmann, D. , Karjoth, G. , and Waidner, M. Springer, Heidelberg, 264–280
- Fonseca, J. , Vieira, M. , and Madeira, H. 2008. Online detection of malicious data access using DBMS auditing. In Proceedings of the ACM symposium on Applied computing (SAC'08), Brazil, 1013-1020.
- Fonseca, J. , Vieira, M. , and Madeira, H. 2007. Integrated intrusion detection in databases. In Proceeding of Third Latin-American Symposium on Dependable Computing (LADC 2007), Morelia, Mexico, September, 198- 211
- Chagarlamudi, M. , Panda, B. , Hu, Y. 2009. Insider threat in database systems: Preventing malicious users' activities in databases. In proceeding of Sixth International Conference on Information Technology: New Generations, 1616-1620
- Mathew, S. , Petropoulos, M. , Ngo, H. Q. and Upadhyaya, S. 2010. A data-centric approach to insider attack detection in database systems. In Recent Advances in Intrusion Detection (RAID) Symposium, Springer, 382- 401.
- Hu, Y. , and Panda, B. , 2004. A Data Mining Approach for Database Intrusion Detection. In ACM Symposium on Applied Computing, 711 – 716.
- Srivastava, A. , Sural, S. , and Majumdar, A. K. "Database intrusion detection using weighted sequence mining," Journal of Computers, VOL. 1, NO. 4, JULY 2006. 8-17
- Hashemi, S. , Yang, Y. , Zabihzadeh, D. , and Kangavari, M. "Detecting intrusion transactions in databases using data item dependencies and anomaly Analysis", Journal of Expert Systems, Vol. 25, No. 5, Blackwell Publishing Ltd, November 2008, 460-473
- Lewis, M. 2004. SQL Server Security Distilled, 2nd ed. , Apress, New York, NY
- Rezk, A. , Ali, H. A. , Elmikkawy, M. , and Barakat, S. , Integrating a Database Intrusion Detection System with Access Control. In proceeding of 5th international conference on intelligent computing and information system, Egypt, 2011, 46- 52
- Rezk, A. , Ali, H. A. , Elmikkawy, M. , and Barakat, S. , "Minimize the False Positive Rate in a Database Intrusion Detection System", International Journal of Computer Science & Information Technology (IJCSIT) Vol 3, No 5, Oct 2011, (DOI : 10. 5121/ijcsit. 2011. 3503), 29-38
- Wang, W. , and Yang, J. , 2005. Mining Sequential Patterns from Large Data Sets, Springer.
Index Terms
Keywords