|
Published Articles >> Table of Contents >> Abstract
2004 International Conference on Dependable Systems and Networks (DSN'04)
p. 443
A Portable Implementation Framework for Intrusion-Resilient Database Management Systems
Alexey Smirnov, SUNY at Stony Brook, NY
Tzi-cker Chiueh, SUNY at Stony Brook, NY
Full Article Text:
  
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/DSN.2004.1311914
Send link to a friend
| Abstract |
|
An intrusion-resilient database management system is the one that is capable of restoring its consistency after being compromised by a malicious attack or a human error. More specifically, an intrusion-resilient mechanism helps to quickly repair a database by nullifying the damage caused by malicious or erroneous transactions, while preserving the effects of unaffected legitimate transactions that take place between intrusions/errors and their detection. The goal of this project is to develop a portable implementation framework that can augment a commercial database management system with intrusion resilience without requiring any modifications to its internals. The intrusion resilience mechanism described in this paper significantly improves the availability of modern DBMSs by facilitating and sometimes even automating the post-intrusion damage repair process. In addition, it can be embodied in a reusable implementation framework, whose portability is demonstrated by its successful application to three different DBMSs: PostgreSQL, Oracle, and Sybase. Performance measurements on the fully operational prototypes under the TPC-C benchmark show that the run-time overhead of the intrusion-resilience mechanism is between 6% and 13%.
|
 Additional Information
|
Citation:
Alexey Smirnov, Tzi-cker Chiueh,
"A Portable Implementation Framework for Intrusion-Resilient Database Management Systems,"
dsn,
p. 443,
2004 International Conference on Dependable Systems and Networks (DSN'04),
2004
|
|
