NDLI: A New Database Firewall Based on Anomaly Detection

Content Provider	IEEE Xplore Digital Library
Author	Jianhua Sun Hao Chen Chunmei Niu
Copyright Year	2010
Abstract	We present here a data-base firewall to prevent from attacks against MySQL back-end data-base of web applications. It works as a data-base connection proxy, which means that the web applications connect to the DB-FW rather than the original MySQL server directly. The firewall listens SQL query requests from the client as well as analyzes them, and then if they are safe, will call the original MySQL server to execute the queries, else will block the queries and return an empty result to the client. It can be configured to work under different ways. Here we use a special method to analyze the SQL queries, not only analyzes the structure of the queries but also the user inputs with some models, all of which allow for the detection of known and unknown attacks with low false positives and false negatives. From the experiments, we can see that it has a low performance overhead.
Starting Page	399
Ending Page	404
File Size	392277
Page Count	6
File Format	PDF
ISBN	9781424491100
DOI	10.1109/PDCAT.2010.71
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2010-12-08
Publisher Place	China
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Fires Data models Servers Feature extraction Security Numerical models Performance evaluation firewall data-base firewall anomaly detection data-base security
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

A model for website anomaly detection based on log analysis

Analyzing and resolving anomalies in firewall security policies based on propositional logic

A learning-based anomaly detection model of SQL attacks

Disarming firewall

Using feature selection for intrusion detection system

A grid-based clustering for low-overhead anomaly intrusion detection

Study on power e-Commerce network security technique and design based on firewall

A new intrusion detection method based on behavioral model

A Fully Automatic Approach for Fixing Firewall Misconfigurations

A New Database Firewall Based on Anomaly Detection

Similar Documents

A model for website anomaly detection based on log analysis

Analyzing and resolving anomalies in firewall security policies based on propositional logic

A learning-based anomaly detection model of SQL attacks

Disarming firewall

Using feature selection for intrusion detection system

A grid-based clustering for low-overhead anomaly intrusion detection

Study on power e-Commerce network security technique and design based on firewall

A new intrusion detection method based on behavioral model

A Fully Automatic Approach for Fixing Firewall Misconfigurations

A New Database Firewall Based on Anomaly Detection