Konferans bildirisi Açık Erişim

DATABASE SECURITY IN PRIVATE DATABASE CLOUDS

2014    Cinar, Onur; Guncer, R. Haluk; Yazici, Adnan

Cloud computing and cloud systems are very popular in today's Information Technology (IT) and systems and have grown very quickly. Cloud computing helps organizations solve increasing IT costs such as their licenses, power consumption, physical protection, by providing better standardization, higher benefit, greater performance, and quicker responses of information services. Carrying vital importance for our private and secret information, cloud systems must provide extra security solutions for database systems with organizations. While using firewalls, and intrusion detection systems on the network for external attacks, some improved access controls must be definitely decided for internal attacks as well. Using database transaction logs and audit can be very helpful on developing a database protection system. However, storing these logs may cause some serious storage and performance problems. Another problem is to manage multiple databases at the same time. In this study we introduce a new lightweight cloud-based database security solution by enhancing our previously developed database security solution, InfoFence, while managing many databases at the same time from a central point. The performance of our proposed database security system in a private cloud has been evaluated against one of the most commonly used products on the market, Oracle Audit Vault Server, and we show that our proposed solution has better performance results in our test environment.