基于Netfilter的数据库防火墙的研究与实现学-信息安全专业论文.docxVIP

华中科技大学硕士学位论文 华 中 科 技 大 学 硕 士 学 位 论 文 II II Abstract With the Internet becoming more open, network information security has become increasingly severe, more and more extensive network database, the stored information is increasingly valuable, once exposed to this information, the consequences would be disastrous, so the database database must be strong protection. Database security framework is divided into three levels: network level and operating system level, database management system level. The three levels of security built into the system, database system, and data security relationship is gradually close, layer by layer to enhance prevention of importance, from outside to inside, from outside to inside to ensure data security.Firewall network security technology as the most direct and effective means of, as the current network system for local network access control strategy to protect one of the most popular network security protection tools. The firewall with Linux netfilter system in the framework used and the packet filtering firewall technology presents a database based on netfilter. Firewall Model and its independent of the database management system and service database management system, at the network layer to provide security for the security of the database protection. However, due to firewall technology only provide static defense of their own limitations, so the database firewall is not enough intelligence, and intrusion detection technology can detect abnormal behavior that system in the abnormal behavior, with the characteristics of its interaction with the database firewall that Abnormal behavior detection technology found by the abnormal behavior of the dynamic database, the firewall through the protective response to dynamic in order to achieve a dynamic security model, to further enhance the protective capability of the database system. Keywords：Database security, firewall, anomaly detection, packet filtering 独创性声明 本人声明所呈交的学位论文是我个人在导师指导下进行的