Portable intrusion-resilient database management server

An intrusion-resilient database management system is the one that is capable of restoring its consistency after being compromised by a malicious attack or human error. More specifically, an intrusion-resilient mechanism helps to quickly repair a database by nullifying the damage caused by malicious...

Full description

Saved in:
Bibliographic Details
Main Authors: Smirnov, A., Lam, L., Chiueh, T.
Format: Conference Proceeding
Language:English
Subjects:
Availability
Computer errors
Computer science
Database systems
File servers
Hardware
Humans
Information systems
Resilience
Transaction databases
Online Access:Request full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:An intrusion-resilient database management system is the one that is capable of restoring its consistency after being compromised by a malicious attack or human error. More specifically, an intrusion-resilient mechanism helps to quickly repair a database by nullifying the damage caused by malicious or erroneous transactions, while preserving the effects of unaffected legitimate transactions that take place between intrusions/errors and their detection. The goal of this project is to develop a portable implementation framework that can augment a commercial database management system with intrusion resilience without requiring any modifications to its internals. The intrusion resilience mechanism described in this paper significantly improves the availability of modern DBMSs by facilitating and sometimes even automating the post-intrusion damage repair process. In addition, it can be embodied in a reusable implementation framework, whose portability is demonstrated by its successful application to three different DBMSs, PostgreSQL, Oracle, and Sybase. Performance measurements on the fully operational prototypes under the TPC-C benchmark show that the run-time overhead of the intrusion-resilience mechanism is between 6% and 13%.
ISSN:2155-7578
2155-7586
DOI:10.1109/MILCOM.2005.1606147