A database security gateway to the detection of SQL attacks

摘要

with the rapid development of Internet, more and more web applications based on database appeared, thus the databases face the threats. Because of the SQL attacks, people pay much attention to the security of database on the internet. This paper presents a solution that is a database security gateway deployed between web server and database server. The paper describes the architecture of the database security gateway, and focuses on the research of the attack protection module, including the construction of secure rules library, the process of SQL statements filtering, the improvement and application of Sunday pattern matching algorithm. The database security gateway has been carried out in power industry and has good effect.