|
In modern society, the development of computer technology and network technology are very rapid, Database applications are increasingly used in various fields. More and more scientific research institutions, enterprises, banks and so are connect the database to the internet. However, database security issues brought about by these technologies can not be ignored, for example, sensitive data against theft and tampering. The current network security requirement the safety requirement is high. Traditional firewall has reached less than some of the higher requirements. For some intrusion such as SQL injection, unauthorized access, cross-scripting attacks invasion bloated. These incursions are likely to bypass the front desk security systems and data sources to attack, so we urgently need to improve the security of the database.Firstly, the paper describes relevant knowledge of database security and hacking. Then, it analyzes the safety status of domestic databases, and describes the more common attack mode, the buffer overflow attack, and proposes measures to prevent the buffer overflow attack, while the measures are too difficult to protect the database security. Finally, in order to improve the security of databases, it brings the intrusion detection technology to the databases, establishes the database intrusion detection system and detailed describes the structure and principle of each unit member. The paper presents a two-phase establishing mode and fuzzy contour tree matching method, realizes an application-level database intrusion detection method to improve the accuracy of intrusion detection, it has a high feasibility and practical value.
|