Database Security of Metrology Information Management System

Abstract

Abstract: Nowdays information security has drawn increasing attention. The article focuses on the security of database on the basis of introducing the architecture design, development environment and function module design. The system combines database technology with Web technology using ASP+IIS+SQL Server 2005 platform architecture. User identity authentication, firewall technology, role based acess control, data encryption, audit trail and intrusion detection, anti database download and anti-SQL attack injection are used to protect the database considering network system level, operating system level and database management system level.

Key words: metrology information management system, database, database security

NI Qing1， MAO Yu-guang2. Database Security of Metrology Information Management System[J]. Computer and Modernization.

References ［13］

	［1］
	朱建冰. 基于ASP_NET的计量管理信息系统［J］. 计量与测试技术， 2011,38（1）:15-16.
［2］	高少杰. SQL注入攻击防御方法研究［D］. 昆明：云南大学， 2010.
［3］	刘海勇. 基于B_S模式的Web数据库安全机制应用研究［J］. 科技情报开发与经济， 2007，17（12）：229-130.
［4］	Lee Inyong, Jeong Soonki, Yeo Sangsoo, et al. A novel method for SQL injection attack detection based on removing SQL query attribute values［J］. Mathematical and Computer Modelling, 2011,55(1):58-68.
［5］	Carles Martinez-Garcia, Guillermo Navarro-Arribas, Joan Borrell. F-uzzy role-based access control［J］. Information Processing Letters, 2011,111(1):483-487.
［6］	Sreelaja N K, Vijayalakshmi Pai G A. Ant colony optimization based approach for efficient packet filtering in firewall［J］. Applied Soft Computing, 2010,10(4):1222-1236.
［7］	Zhang Haixia, Su Purui, Feng Dengguo. A network security analysis model based on the increase in attack ability［J］. Journal of Computer Research and Development, 2007,44(12):2012-2019.
［8］	Dusan Petkovic. Microsoft SQL Server 2005: A Beginner’s Guide［M］. McGraw-Hill Osborne Media, 2005.
［9］	Sylvia Osborn. Database security integration using role-based access control［J］. Data and Application Security, 2002,73:245-257. 
［10］	张敏,徐震,冯登国. 数据库安全［M］. 北京:科学出版社, 2005.
［11］	吕金秋. Web数据库安全技术研究与应用［D］. 长春：吉林大学, 2009.
［12］	李华. 计量系统中数据库安全审计技术的应用研究［D］. 北京：北方工业大学， 2008.
［13］	郜激扬. 基于Web服务的数据库注入攻击与防范［J］. 华北水利水电学院学报， 2008，29（1）：89-91.

[1]	ZHANG Li, LUO Chun-shan, XIE Wei-yuan, LI Bei-bei. Adaptive Encryption Method for Private Database Based on Branch Obfuscation Algorithm [J]. Computer and Modernization, 2022, 0(03): 43-47.
[2]	LI Wen-quan, XU Su-ping. Tourism Resource Information Database System Based on Geographic Information [J]. Computer and Modernization, 2021, 0(08): 100-103.
[3]	LEI Ming, ZHAO Yu-juan, JIANG Han-sheng, WU Guo-liang, LIANG Jian. Construction of Meteorological System Data Service Platform Based on Distributed Technology [J]. Computer and Modernization, 2020, 0(11): 56-59.
[4]	LI Xi-min, LI Shu-qi. Automatic Processing Method for Cache Conflict of Multi-source Database Based on Rough Set [J]. Computer and Modernization, 2020, 0(10): 36-39.
[5]	FANG Zhou, CHENG Qing, PEI Xu-bin . Data Security Protection of Electricity Marketing Information System [J]. Computer and Modernization, 2019, 0(03): 111-.
[6]	XIEBin-ming,WANGXiao-dong. StorageReplication Technologyof Heterogeneous Database#br# in Regional Network [J]. Computer and Modernization, 2018, 0(07): 1-.
[7]	JIPeng1,2,LIHui1,2,CHENMei1,2,DAIZhen-yu1,2. DoFFT:AFastFourierTransformMethodBasedonDistributedDatabase [J]. Computer and Modernization, 2018, 0(06): 19-.
[8]	LIU Yan-ping. Method of Developing Database Driven by Golang [J]. Computer and Modernization, 2018, 0(01): 113-115.
[9]	QI Bin. Design and Implementation of Data Acquisition System of Networked Database [J]. Computer and Modernization, 2017, 0(5): 71-75.
[10]	LIU Si-tong1, LUO Jun1, ZHAN Huo-mu2. Research on Mapping and Storing OWL File to Relational Database [J]. Computer and Modernization, 2017, 0(5): 83-87.
[11]	LIU Qun1,2, SONG Qianyi2, CHANG Yong1,2, YANG Jianxu1,2. Design of Unified Commercial Database Management [J]. Computer and Modernization, 2017, 0(3): 109-.
[12]	DAI Sheng, WANG Bo. Relational Query in Large-scale Configuration Management Database Based on Graph Database [J]. Computer and Modernization, 2017, 0(1): 51-56.
[13]	WANG Qiang, ZHAO Long, WU Peng. A Method for Paint Database Establishment and Color Matching Based on Absolute K&S [J]. Computer and Modernization, 2016, 0(9): 96-99.
[14]	WU Fei, MAO Yu-guang. A Multi-null Value Estimation Method Based on Multi-table Relationship Information in Relational Database [J]. Computer and Modernization, 2016, 0(6): 117-122.
[15]	DAI Yang, CHEN Fang. Data Compression Algorithm in Real-time Database [J]. Computer and Modernization, 2016, 0(6): 123-126.