基于后关系型数据库审计的安全解决方案.pdfVIP

信息安全与网络管理 Information Safety and Network Management 基于后关系型数据库审计的安全解决方案 ① ＊ ① ① ② 韩向非 郭幽燕 伍阳 赵宇 刘永波 摘 要 医院信息系统数据库采用的后关系型数据库Caché，除了具备关系数据库的一些特点外，还具有独特的多维数据结 构，采用特殊的面向对象的M语言。针对后关系数据库，采用关系数据库审计技术，无法达到满意的审计效果。根据国家信 息安全等级保护对数据库的审计系统的要求，医院按照分层模式构建数据库审计系统并以旁路监听的方式接入。经过一年多 的使用，该方案可以有效地实现对数据库访问行为的审计，同时可以对敏感数据的高风险访问进行报警和记录，防止数据泄 露。 关键词　后关系型数据库Caché 数据库安全 等级保护 Doi:10.3969/j.issn.1673-7571.2016.11.024 [中图分类号] R393 [文献标识码] A The Safety Solution Based on Post-relational Database Audit / HAN Xiang-fei, GUO You-yan, WU Yang, et al//China Digital Medicine.-2016 11(11): 71 to 73 Abstract Caché, the post-relational database used by the hospital information system database not only has some characteristics of a relational database, but also has the unique multi-dimensional data structure and uses the special object-oriented M language. For the post-relational database, with the relational database audit technology, the satisfactory auditing results cannot be achieved. In this paper, according to requirements of the national classified protection of information security protection to the audit system of database, the hospital builds the database audit system according to the hierarchical model and accesses by bypass monitoring. After more than a year of use, this proposal can effectively realize the audit of database access behaviors, and alarm and record the high-risk access to sensitive data and prevent data leakage. Keywords post-relational database Caché, database safety, classified protection Corresponding author Beijing Anzhen Hospital, Capital Medical University, Beijing 100029, P.R.C. 1 引言 美国Intersystems公司的后关系型数据库——Caché在欧美医疗领域使用范围最广，因此，它被医疗界公认为首选 数据库。Caché数据库的数据查询速度快，并可支持关系型数据库和对象型数据库。Ca