.png){kind=icon}
返回
Preventing database schema extraction by error message handling
.png){kind=icon}
PRE
AI
DOI：10.1016/j.is.2015.09.010.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Nowadays, a large volume of an organization's sensitive data is stored in databases making them attractive to attackers. The useful information attackers try to obtain in the preliminary steps, is the database structure or schema. One of the popular approaches to infer and extract the schema of a database is to analyze the returned error messages from its DBMS. In this paper, we propose a framework to handle and modify the error messages automatically in order to prevent schema revealing. To this aim, after identifying and introducing an appropriate set of categories of error messages, each error message that is returned from a DBMS is placed in a proper category. According to the policy specified for each category, corresponding rules are applied for removing/modifying/obfuscating the sensitive data in the error messages of that category before submitting them to the application. The general way proposed to determine the category of an error message is employing the keyword based categorization approach, which is 95% accurate for Microsoft SQL Server 2012. (C) 2015 Elsevier Ltd. All rights reserved.
Keyword:
Error handling
Database security
Database schema extraction
Error message modification
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
3.9
论文数:
2.8K
被引数:
1.8K
机构
引用论文
.png){kind=icon}
An Alcohol Research Center in Concept and Practice: interdisciplinary collaboration at the UConn ARC一个概念与实践中关于酒精研究中心：康涅狄格大学ARC的跨学科合作
PREAI
分享收藏A generic ranking function discovery framework by genetic programming for information retrieval通过遗传编程进行信息检索的通用排名功能发现框架
PREAI
分享收藏
Militarism, its Dimensions and Corollaries: An Attempt at Conceptual Clarification军国主义、其维度与推论：一次概念澄清的尝试
PREAI
分享收藏 没有更多内容
没有更多内容