Netinfo Security

Netinfo Security ›› 2016, Vol. 16 ›› Issue (9): 1-5.doi: 10.3969/j.issn.1671-1122.2016.09.001

• Orginal Article •     Next Articles

Research on Security Risks Detection of MySQL

Xuefen LIU1,2,3, Rongxin SUN1,2(), Luning XIA1,2, Wei LI4,5   

  1. 1. Data Assurance and Communication Security Research Center, Chinese Academy of Sciences, Beijing 100093, China
    2. Institute of Information Engineering, Chinese Academy of Sciences, Beijing 100093, China
    3. University of Chinese Academy of Sciences, Beijing 100049, China
    4. Beijing Engineering Laboratory of Smart Network Authentication, Beijing 100085, China
    5. Feitian Technology Co., Ltd., Beijing 100085, China
  • Received:2016-07-25 Online:2016-09-20 Published:2020-05-13

RichHTML

4

PDF (PC)

235

Abstract:

Database management system (DBMS) is large software for manipulating and managing databases, which is widely used in E-commerce, social networks and other application systems. Today, attacks against company core data and personal privacy data stored in databases are becoming considerable threats, a great amount of which, mainly SQL injection, exploit the flaw of DBMS’s security design. Thus it is quite necessary to evaluate the security of DBMS design, and examine whether the implement satisfies the DBMS standards. Despite the emergence of NoSQL and other Non-relational DBMS, rational DBMS still dominates. MySQL is the most popular open source DBMS nowadays. This paper introduces DCS MySQL Test Suit, a DBMS secure evaluation system in the perspective of conformance, and implements it on MySQL. The system evaluates the semantic security of MySQL based on the SQL92 standard, and has advantages of lightweight and easy transplantation.

Key words: DBMS, MySQL, conformance testing, security testing

CLC Number: