Database Security Protection based on a New Mechanism

Abstract

The database security is one of the important issues that should take a complete attention from researchers. Although applying the traditional security mechanisms, the database still violate from both of external and internal users. So, the researchers develop a Database Intrusion Detection System (DBIDS) to detect intrusion as soon as it occurs and override its malicious affects. The previous work developed a DBIDS as a third party product which is isolated from the DBMS security functions especially access controls. The lack of coordination and inter-operation between these two components prevent detecting and responding to ongoing attacks in real time, and, it causes high false alarm rate. On the other hand, one of the directions that are followed to build a profile is the data dependency model. Although this model is sufficient and related to the natural of database, it suffers from high false alarm rate. This means that it needs an enhancement to get its benefits and eliminate its drawbacks. This Paper aims to strengthen the database security via applying a DBID. To achieve this goal it develops an efficient IDS for DB and integrates it with DBMS for cooperation and completeness between the different parts in the security system. The experiments declare that the proposed model is an efficient DBIDS with a minimum false positive rate (nearly zero %) and maximum true positive rate (nearly 100%). Moreover, it is based on a novel method to build an accurate normal user profile and integrate it with access control. General TermsDatabase, Security.

Applying Software Engineering Methodology for Designing Biomedical Software Devoted To Electronic Instrumentation

“…Some specific training is necessary to work with any of these technologies. Few works have been done about protecting data for confidentiality, integrity and access control to sensitive information as those discussed by Rezk et al (2012). In their purpose, when user submits a query to execute, the system checks if he has authority to access data items in the query, the context in which the user accesses the data items is checked to determine if he follows his normal behavior or not.…”

“…Considering that an incident can occur when unprepared staff operates complex biomedical system, all biomedical systems should have access control for each available process into the system. One solution reported by Rezk et al (2012) makes it possible to mine the dependency among user's data items from his transaction log and generates specific rules, which determine the context in which the user access the data items. According to them the challenge is building an efficient Database Intrusion Detection System, which can detect any malicious transaction with low false positive rate and high detection rate and integrating it with access control, in order to strength the database security.…”