A Real-time Intrusion Prevention System for Commercial Enterprise Databases

Mattsson, Ulf T., "A Real-time Intrusion Prevention System for Commercial Enterprise Databases" . Available at SSRN:

Abstract:

Modern intrusion detection systems are comprised of three basically different approaches, host based, network based, and a third relatively recent addition called procedural based detection. The first two have been extremely popular in the commercial market for a number of years now because they are relatively simple to use, understand and maintain. However, they fall prey to a number of shortcomings such as scaling with increased traffic requirements, use of complex and false positive prone signature databases, and their inability to detect novel intrusive attempts. This intrusion detection systems represent a great leap forward over current security technologies by addressing these and other concerns. This paper presents an overview of our work in creating a true database intrusion detection system.

Based on many years of Database Security Research, the proposed solution detects a wide range of specific and general forms of misuse, provides detailed reports, and has a low false-alarm rate. Traditional database security mechanisms are very limited in defending successful data attacks. Authorized but malicious transactions can make a database useless by impairing its integrity and availability. The proposed solution offers the ability to detect misuse and subversion through the direct monitoring of database operations inside the database host, providing an important complement to host-based and network-based surveillance. Suites of the proposed solution may be deployed throughout a network, and their alarms managed, correlated, and acted on by remote or local subscribing security services, thus helping to address issues of decentralized management.

Click here to see more on this topic.

Previous visitors have searched for information on lotus migration notes, lotus notes suck and unmc lotus notes. We do collect this information to update our site to your needs.

Lotus Notes is used by more than 100.000 people world wide. Other e-mail clients are: Lotus Notes , Becky! and 24SevenOffice and other personal information manager software are: Lotus Agenda (Windows) , Google Calendar and Omea (Windows) .