A Real-Time Intrusion Prevention System for Commercial Enterprise Databases

: - Modern intrusion detection systems are comprised of three basically different approaches, host based, network based, and a third relatively recent addition called procedural based detection. The first two have been extremely popular in the commercial market for a number of years now because they are relatively simple to use, understand and maintain. However, they fall prey to a number of shortcomings such as scaling with increased traffic requirements, use of complex and false positive prone signature databases, and their inability to detect novel intrusive attempts. This intrusion detection system interacts with the access control system to deny further access when detection occurs and represent a practical implementation addressing these and other concerns. This paper presents an overview of our work in creating a practical database intrusion detection system. Based on many years of Database Security Research, the proposed solution detects a wide range of specific and general for...

• Type: Conference
• Year: 2004
• Where: ICETE
• Authors: Ulf T. Mattsson
• Keywords: Database Security, ICETE 2004, ICETE 2007, Intrusion Detection System, Modern Intrusion Detection