Abstract:More and more network attacks are focusing on application level vulnerabilities. Recently, several examples of this trend have been highly publicized such as the SQL Slammer and SQL Snake attacks. Traditional firewalls, used for protecting the database, only prevent attacks searching for vulnerabilities. Database firewalls take defense deep into the organization by providing full syntax control and audit of the SQL AN stream before it reaches the database, and enforcing content-driven access to database. This paper proposes a layered reference model for database firewalls by enhancing the capability of COAST Laboratory's model. It separates a database firewall into three layers (network layer, schematic layer and semantic layer) according to the knowledge, computation target, and the control granularity of each layer. Based on this model, a database firewall product had been prototyped It can greatly improve the database security by introducing self-controlled authentication principal mapping, object mapping, and mandatory access control modules.

FORMAL SECURITY DATABASE SYSTEM ACCESS MODEL

ON A MULTILEVEL SECURITY MODEL OF SECURITY DATABASE AND FOREIGN KEY REFERENCE

A Reference Model And System Architecture For Database Firewall

Dynamically modified union model combining confidentiality and integrity

Research on Information Security Model and Security System Design

Dynamic Security Access Control Model Based on System Reliability

The Design of an Useful Security Management Model of PDMS and Its Realization

Multi-level Access Control for Collaborative CAD

The research for spatial role-based access control model

Practical Way to Implement Role-Based Access Control in Security Administration System

Business Activity-Oriented Security Model of Information Systems

Realization Method about Access Control of System Based on Web

An authentication model for multilevel security domains

A Multilevel Security Model for Private Cloud

A Reference Model for Database Security Proxy

A Multilevel Security Model with Credibility Characteristics

A model of authorization for next-generation database systems

Multilevel Multi-policy Access Control Model for Collaborative Application

An Extended Access Control Model Based on Roles and Departments

Availability Analysis Method of Multilevel Security Models with Credibility Characteristics

Design and Development of a Defense-in-Depth Model for Database Security