ODAR: an on-the-fly damage assessment and repair system for commercial database applications

摘要: This paper presents the design and implementation of an on-the-fly damage assessment repair tool for intrusion tolerant commercial database applications, called ODAR. ODAR is a COTS-DBMS-specific general approach developed by P. Ammann, S. Jajodia, Liu in [8]. The approach, given set malicious transactions reported detector, locates repairs caused each transaction on database, along with any benign that affected, directly or indirectly, transaction. without need to periodically halt normal processing. In this paper, development first prototype, which Oracle Server 8.1.6, discussed. uses triggers profiles keep track read write operations transactions, tracing affecting relationships among history, composing executing some specific UNDO transactions. transparent on-going user very general. addition Oracle, it can be easily adapted support many other application platforms such as Microsoft SQL Server, Sybase, Informix. To our best knowledge, do automatic applications.