【作者】 戴华； 秦小麟； 柏传杰；

【Author】 Dai Hua,Qin Xiaolin,Bai Chuanjie (College of Information Science & Technology,Nanjing University of Aeronautics and Astronautics,Nanjing 210016)

【机构】 南京航空航天大学信息科学与技术学院；

【摘要】 在传统的恶意事务检测方法的基础上,通过扩展对SQL语句的解析粒度,给出蕴含条件子句逻辑结构的细粒度SQL语句特征向量表示方法,在此基础上给出包含事务语句有向图和事务执行环境约束集合的事务模板表示方法,并提出了一种基于事务模板的恶意事务检测算法。实验表明该检测方法不仅具有较好的性能,同时具有更强的检测能力和更广的适用范围。更多还原

【Abstract】 Immediate detection of malicious transaction is an important aspect in building survivable DBMS.Based on traditional methods,a detecting mechanism of malicious transactions based on transaction template for DBMS is proposed.A fine-grained SQL statement feature vector definition is given,which contains logical structure of condition clause.And transaction template involving SQL statements directed graphs and execution environment constraints is provided.Using transaction template,an algorithm for malicious transaction detection is proposed.Experimental results indicate that this detection method has good detection performance, ability and wider detection scopes.更多还原