• DocumentCode
    2549015
  • Title

    Research on Malicious Transaction Processing Method of Database System

  • Author

    Chi Chen ; Deng-Guo Feng ; Min Zhang ; De-sheng Zhang ; He-qun Xian

  • Author_Institution
    State Key Lab. of Inf. Security, Inst. of Software of Chinese Acad. of Sci., Beijing
  • fYear
    2008
  • fDate
    20-22 July 2008
  • Firstpage
    435
  • Lastpage
    440
  • Abstract
    Recovery from information attacks is difficult because DBMS is not designed to deal with malicious committed transactions. A few existing methods developed for this purpose rely on operation logs, which can´t express the dependency between different transactions directly. These methods usually use rollback mechanism and abandon results of innocent transactions to maintain correctness, which may indeed be used as an approach to realize DOS attack. Hence, it´s necessary to find out the malicious transaction and subsequent transactions depending on it precisely. In this paper, the definition of transaction recovery log is presented and each log item records the actions taken in one transaction, by which, we can calculate transactions´ dependency directly. Based on the log model and the algorithm for log´s creation, the dependency calculation and data recovery algorithm are studied, which are proofed to be complete and correct. Using transaction recovery log and the algorithm, database system can significantly enhance the performance of recovery for defensive information warfare.
  • Keywords
    database management systems; security of data; system recovery; transaction processing; DBMS; DOS attack; data recovery algorithm; database system; defensive information warfare; information attacks; malicious committed transactions; malicious transaction processing method; transaction recovery log; Computer crime; Data security; Database systems; Error correction; Hardware; Information management; Information security; Laboratories; Military computing; Transaction databases;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    Web-Age Information Management, 2008. WAIM '08. The Ninth International Conference on
  • Conference_Location
    Zhangjiajie Hunan
  • Print_ISBN
    978-0-7695-3185-4
  • Electronic_ISBN
    978-0-7695-3185-4
  • Type

    conf

  • DOI
    10.1109/WAIM.2008.27
  • Filename
    4597045