Didafit: Detecting intrusions in databases through fingerprinting transactions

ICEIS 2002 - Proceedings of the 4th International Conference on Enterprise Information Systems

Volumn 1, Issue , 2002, Pages 121-128

  Low, Wai Lup ^a   Lee, Joseph ^a   Teoh, Peter ^a  

^a DSO NATIONAL LABORATORIES   (Singapore)

Author keywords

Database misuse; Database security; Intrusion detection

Indexed keywords

INFORMATION SYSTEMS; INTRUSION DETECTION; ONLINE SYSTEMS;

CLIENT-SERVER DATABASE; DATABASE ACCESS; DATABASE SECURITY; E-COMMERCE SITES; INFORMATION ASSETS; INTRUSION DETECTION SYSTEMS; PERSONAL MEDICAL RECORDS; UNAUTHORIZED ACCESS;

DATABASE SYSTEMS;

EID: 84909595754     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (16)

1. Andrews, C. (2001). SQL injection FAQ. Available at http://www.sqlsecurity.com.
2. Atanasov, M. (2001). The Truth about Internet Fraud. Available at URL http://techupdate.zdnet.com/techupdate/stories/main/0, 14179, 2688776-11, 00.html.
3. Castano, S., Fugini, M. G., Martella, G., and Samarati, P. (1995). Database Security. Addison-Wesley - ACM Press.
4. Cisco Systems, Inc. (2001). Cisco intrusion detection. Available at URL http://www.cisco.com/warp/public/cc/pd/sqsw/sqidsz/.
5. Enterasys Networks, Inc. (2001). The Dragon IDS. Available at URL http://www.enterasys.com/ids/dragonids.html.
6. Hatcher, T. (2001). Survey: Costs of computer security breaches soar. Available at URL http://www.cnn.com/2001/TECH/internet/03/12/csi.fbi.hacking.report/.
7. Internet Security Systems (2001). RealSecure Intrusion Detection Solution. Available at URL http://www.iss.net.
8. Internet Security Sytems (2001). Database Scanner. Available at URL http://www.iss.net/securing-e-business/security-products/security-assessment/database-scanner/.
9. Landrum, D. E. (2001). Web application and databases security. Available at URL http://www.sans.org/infosecFAQ/securitybasics/web-app.htm.
10. Lee, W., Stolfo, S., and Mok, K. (1999). A data mining framework for building intrusion detection models. In Proceedings of the 1999 IEEE Symposium on Security and Privacy.
11. NFR Security (2001). NFR network intrusion detection. Available at URL http://www.nfr.com/products/NID/.
12. Oracle Corporation (2001). Oracle. Available at URL http://www.oracle.com.
13. Pentasafe (2001). Database security manager. Available at URL http://www.pentasafe.com/products/database-overview.htm.
14. Roesch, M. (1999). Snort: Lighweight intrusion detection for networks. In Proceedings of the 13th Conference on Systems Administration (LISA-99). USENIX Association.
15. Symantec Corporation (2001). Enterprise solutions. Available at URL http://enterprisesecurity.symantec.com/.
16. Tan, Y. T., Tan, W. K., Ong, T. H., and Ting, C. (1998). Nidar: The design and implementation of an intrusion detection system. In Proceedings of the First International Workshop on the Recent Advances in Intrusion Detection (RAID).