HDTSM: Hybrid Dynamic Token-based Security Mechanism for Database Protection in E-Government Service Systems

Due to the sensitive nature of the public and private information handled by government entities, ensuring data security is highly crucial for e-government service systems. This paper presents a Hybrid Dynamic Token-based Security Mechanism (HDTSM) for e-government service system databases. Our mechanism employs an SQL tokenization scheme based on Moving Target Defense (MTD) technology, as well as application package integrity verification and database connection authorization schemes to strengthen database security defenses. We present a prototype of the proposed scheme and assess its feasibility and effectiveness. The proposed security mechanism has also been implemented in practical e-government service systems, successfully mitigating database security threats such as SQL injection.