Abstract: A secure model was proposed which not only relied on prevention controls but also incorporated detect intrusion and tolerant intrusion. The model can detect intrusions and locate and repair the damage caused by intrusion based on transactions, which protect the database system and provide secure services to legitimate clients. The techniques of both redundancy and diversity were utilized for secret data storage. Threshold secret share approach was presented to protect confidential data based on Chinese remainder theorem.

Key words: security strengthen, database, model, intrusion tolerant

摘要： 构建了安全数据库系统模型,不仅从系统防御考虑,还有效地结合入侵检测和容忍技术,从事务处理的角度出发。对攻击的损害进行定位和修复,保护了数据库系统安全,为合法用户提供不间断的服务,对于机密数据的存储,将冗余性和多样性技术相结合,采用基于中国剩余定理的秘密共享方案,实现了关键数据的机密存储。

关键词: 安全增强, 数据库, 模型, 入侵容忍