.png){kind=icon}
返回
Implementing a database encryption solution, design and implementation issues
.png){kind=icon}
PRE
AI
DOI：10.1016/j.cose.2014.03.011.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
In this paper, we analyze and compare five traditional architectures for database encryption. We show that existing architectures may provide a high level of security, but have a significant impact on performance and impose major changes to the application layer, or may be transparent to the application layer and provide high performance, but have several fundamental security weaknesses. We suggest a sixth novel architecture that was not considered before. The new architecture is based on placing the encryption module inside the database management software (DBMS), just above the database cache, and using a dedicated technique to encrypt each database value together with its coordinates. These two properties allow our new architecture to achieve a high level of data security while offering enhanced performance and total transparency to the application layer. We also explain how each architecture can be implemented in a commercial, open source DBMS. We evaluate the performance of the various architectures both analytically and through extensive experimentation. Our performance evaluation results demonstrate that in most realistic scenarios, i.e., where only a part of the database content is stored in the database cache, the suggested architecture outperforms the others. (C) 2014 Elsevier Ltd. All rights reserved.
Keyword:
Relational database
Security, integrity, and protection
Data encryption
Database cache
Transparent data encryption
期刊
C
IF:
5.4
论文数:
4.6K
被引数:
1.4W
机构
查看更多机构
引用论文
.png){kind=icon}
Beyond Chemoimmunotherapy in Advanced Non–Small Cell Lung Cancer: New Frontiers, New Challenges
PREAI
分享收藏分享收藏 没有更多内容