Challenges and Security Vulnerabilities to Impact on Database Systems

Abstract

Abstract
 A lot of institutions depends at present on the systems database operations and their daily activities, thus providing a means for the maintenance of permanent data can refer to it at any time, as well as to search and to modify the data easily. in this paper to determine the security challenges in the databases, and requirements necessary to address those challenges in the data value to provide security base, and to determine the security rules and know the weaknesses that can be exploited any information in a manner not allowed, when he must protect the database to make sure of the following purposes: confidentiality, integrity and continuity. One of the solutions used in this research to protect databases, and encryption of sensitive data, and adjust the system databases, and updates the database systems and we review some of the ways to address these challenges in the security databases.

New Solution Implementation to Protect Encryption Keys Inside the Database Management System

“…Table 4 shows the encryption test results of the 6 columns of the "agent" table deploying the model (1). Likewise, in the model (2) implementation, one encryption key of the table "agent" has protected with a single Km generated using this model. Then, this protection was tested using the model (B).…”

“…Database (DB) level encryption is a way to encrypt and decrypt data within the Database Management System (DBMS) using keys held by the DB server [1]. In fact, this encryption model offers major advantages, in particular, those related to the security of the encryption keys against external attacks performed outside the information system [2,3]. Though the probability of the administrator attack is not negligible, he owns large privileges on DB.…”

“…The DB encryption using model(2) and (B).Algo4CREATE OR REPLACE TRIGGER Insert_Model_2 BEFORE INSERT ON agent FOR EACH ROW DECLARE KT varchar2(100); BEGIN /* Generating Km and seeking KT for each column from MYTABLE_ENCRYPT_OBJET*/ KT :=Search_Ecrypt_Key( 'agent'); /* Inserting in table "agent"*/ INSERT INTO agent VALUES (Encrypt_AES256 (KT,:new.idf_agent), Encrypt_AES256 (KT,:new.name_agt), Encrypt_AES256 (KT,:new.Dose_interne_agt), Encrypt_AES256 (KT,:new.Dose_superficielle_agt), Encrypt_AES256 (KT,:new.Dose_profonde_agt), Encrypt_AES256 (KT,:new.Catégorie_agt)); End ; END ;…”

“…table "agent" by deploying the model(2).• The results presented in tables 2 and 3 shows the keys generation when the "agent" table is created by the administrator. In table 2, the columns C3_KEY and C4_MASTERKEY represents, respectively, the encryption key generated of each column and its associated Km.…”

A New Solution to Protect Encryption Keys when Encrypting Database at the Application Level

“…Recently, it has been the subject of several debates and studies by experts and researchers in the data security field. The main purpose is to protect sensitive data against unavailability, leakage, and modification face to attackers' threats [9], [21], [22].…”