A framework for database intrusion detection system

Database management system is not enough for new high-tech attack, so Database Intrusion Detection System is required as additional security layer. Over the last few years, many database intrusion detection systems are developed using anomaly method like mining data dependencies among data items, access pattern etc. In this paper we have used signature based approach, which is defined on role hierarchy. Roles classify the user and makes management easy. We have worked on valid transaction sequences which are stored in profile table. This approach takes care of privilege right checking at attribute level.

I. Introduction

The Information works as very serious role in any organization. Sensitive and private information is often stored within the database. Authentication, Authorization, Auditing, Encryption, Access control are traditional mechanisms which do not provide higher level of confidence. However, information era makes new responsibility for organization to manage data which increase their size with time. New Responsibility needs new technology which will work along with the existing system.