基于入侵容忍的分布式數(shù)據(jù)庫(kù)安全體系結(jié)構(gòu)

分析了分布式數(shù)據(jù)庫(kù)系統(tǒng)的結(jié)構(gòu)及其面臨的安全問(wèn)題，提出了一種基于容侵技術(shù)的分
布式數(shù)據(jù)庫(kù)體系結(jié)構(gòu)。從事務(wù)處理的角度出發(fā)，結(jié)合入侵檢測(cè)和容侵技術(shù)，對(duì)被攻擊的部分進(jìn)行定位和修復(fù)，為合法用戶提供不間斷的服務(wù)。采用門(mén)限秘密共享技術(shù)，實(shí)現(xiàn)關(guān)鍵數(shù)據(jù)的機(jī)密性。
關(guān)鍵詞：分布式數(shù)據(jù)庫(kù)；入侵容忍；入侵檢測(cè)
Abstract: This paper analyses the structure of distributed database system and its security issue, then proposes an architecture for distributed database system security based on intrusion tolerance. With intrusion detection and intrusion tolerance technology, based on transactions, this architecture can detect intrusions, locate and repair the damage caused by the intrusions , thus, the system can provide uninterrupted services to legitimate users. Threshold secret share schemes are presented to protect confidential data.
Key words: distributed database; intrusion tolerance; intrusion detection