基于SSL的数据库安全代理研究与实现-计算机应用技术专业论文.docxVIP

武汉理工大学硕士论文Abstract 武汉理工大学硕士论文 Abstract Along with the rapid development of computer and network technology, information systems cover much wider range of areas，and data exchange is increasingly multifarious．So，it’S such all important problem that how tO protect information system security．Because database is a set of information,database system security plays a crucial role 011 the information system security． There are two aspects included in database system security,which is access control security strategy and communication channel security． Access control secl／rity strategy is tO preserve the legality of the database users． Nowadays，most database systems ale using client／password authentication method as their aCCeSS control security strategy,which has poor security preservation and has been suffering varieties attacks，such as passive sniffing attack,active man—in-the·middle attack and password guess attack． Communication channel security means data transmission security in the database system．In most database systems，plaintext travels on the communication channel，and human attack from the network occur easily From the abOVe，it’S not difficuR to see the weakness of access control security strategy and the insecurity of communication pipe in most database systems． Therefore,its a very important problem that how to preserve the legality of database users and communication channel security． SSL is a protocol that supports authentication and data encryption．Through study Oil SSL and its key technology,it is recommended that the SSL-based certificate authentication can be used as client access control method in database systems．Further more，not only does SSL provide US data confidentiality,it also preserves the integrity of data by its special way of data package．Therefore，we can rise this to build up a cipher text communication pipe for data transferring between clients and SglVerS ofdatabase systems to preserve data confidentiality and integrity． Thesis researches