Abstract:More and more network attacks are focusing on application level vulnerabilities. Recently, several examples of this trend have been highly publicized such as the SQL Slammer and SQL Snake attacks. Traditional firewalls, used for protecting the database, only prevent attacks searching for vulnerabilities. Database firewalls take defense deep into the organization by providing full syntax control and audit of the SQL AN stream before it reaches the database, and enforcing content-driven access to database. This paper proposes a layered reference model for database firewalls by enhancing the capability of COAST Laboratory's model. It separates a database firewall into three layers (network layer, schematic layer and semantic layer) according to the knowledge, computation target, and the control granularity of each layer. Based on this model, a database firewall product had been prototyped It can greatly improve the database security by introducing self-controlled authentication principal mapping, object mapping, and mandatory access control modules.

ON A MULTILEVEL SECURITY MODEL OF SECURITY DATABASE AND FOREIGN KEY REFERENCE

FORMAL SECURITY DATABASE SYSTEM ACCESS MODEL

A Reference Model And System Architecture For Database Firewall

Dynamically modified union model combining confidentiality and integrity

Dynamic Security Access Control Model Based on System Reliability

The Design of an Useful Security Management Model of PDMS and Its Realization

Research on Information Security Model and Security System Design

The Research on Definition of Multilevel Security Based on the Construction of Covert Channels.

A Integrated Model of RBAC and MAC in Multilevel Relation Database System

A Reference Model for Database Security Proxy

Design and Development of a Defense-in-Depth Model for Database Security

Security constraint processing in a multilevel secure distributed database management system

An authentication model for multilevel security domains

Concept of a Value in Multilevel Security Databases

A Multilevel Security Model with Credibility Characteristics

Architecture for Database Security Based of Multi-layer Intrusion-tolerance

A Multilevel Security Model for Private Cloud

Threat Analysis And Security Protection For Malicious Dbms

Survey of Security in Database

Design and Implementation of A New Database Security Model Based on Hopping Mechanism

Distributed Management and Dynamic Behavior for Multi-Level Security