Simple Dynamic Key Management in SQL Randomization

This work presents a simple key management scheme for dynamic SQL randomization based on the approach of the SNMPv3 key generation. The original SQL randomization technique based on keyed randomization proxies lacks a mechanism for managing and updating cryptographic keys, which renders the technique vulnerable to the exposure or theft of the keys. Our scheme provides a practical solution to remove such a weakness in the SQL randomization technique. The idea was conceived during the course of implementation of the Java Data Security Framework (JDSF) as a part of a database security and privacy project.