TY - GEN
T1 - Database Security in Private Database Clouds
AU - Cinar, Onur
AU - Guncer, R. Haluk
AU - Yazici, Adnan
N1 - Publisher Copyright:
© 2016 IEEE.
Copyright:
Copyright 2017 Elsevier B.V., All rights reserved.
PY - 2017/3/23
Y1 - 2017/3/23
N2 - Cloud computing and cloud systems are very popular in today's Information Technology (IT) and systems and have grown very quickly. Cloud computing helps organizations solve increasing IT costs such as their licenses, power consumption, physical protection, by providing better standardization, higher benefit, greater performance, and quicker responses of information services. Carrying vital importance for our private and secret information, cloud systems must provide extra security solutions for database systems with organizations. While using firewalls, and intrusion detection systems on the network for external attacks, some improved access controls must be definitely decided for internal attacks as well. Using database transaction logs and audit can be very helpful on developing a database protection system. However, storing these logs may cause some serious storage and performance problems. Another problem is to manage multiple databases at the same time. In this study we introduce a new lightweight cloud-based database security solution by enhancing our previously developed database security solution, InfoFence, while managing many databases at the same time from a central point. The performance of our proposed database security system in a private cloud has been evaluated against one of the most commonly used products on the market, Oracle Audit Vault Server, and we show that our proposed solution has better performance results in our test environment.
AB - Cloud computing and cloud systems are very popular in today's Information Technology (IT) and systems and have grown very quickly. Cloud computing helps organizations solve increasing IT costs such as their licenses, power consumption, physical protection, by providing better standardization, higher benefit, greater performance, and quicker responses of information services. Carrying vital importance for our private and secret information, cloud systems must provide extra security solutions for database systems with organizations. While using firewalls, and intrusion detection systems on the network for external attacks, some improved access controls must be definitely decided for internal attacks as well. Using database transaction logs and audit can be very helpful on developing a database protection system. However, storing these logs may cause some serious storage and performance problems. Another problem is to manage multiple databases at the same time. In this study we introduce a new lightweight cloud-based database security solution by enhancing our previously developed database security solution, InfoFence, while managing many databases at the same time from a central point. The performance of our proposed database security system in a private cloud has been evaluated against one of the most commonly used products on the market, Oracle Audit Vault Server, and we show that our proposed solution has better performance results in our test environment.
KW - Database Security
KW - InfoFence
KW - Private Database Clouds
UR - http://www.scopus.com/inward/record.url?scp=85018269560&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=85018269560&partnerID=8YFLogxK
U2 - 10.1109/ICISSEC.2016.7885847
DO - 10.1109/ICISSEC.2016.7885847
M3 - Conference contribution
AN - SCOPUS:85018269560
T3 - ICISS 2016 - 2016 International Conference on Information Science and Security
BT - ICISS 2016 - 2016 International Conference on Information Science and Security
PB - Institute of Electrical and Electronics Engineers Inc.
T2 - 3rd International Conference on Information Science and Security, ICISS 2016
Y2 - 19 December 2016 through 22 December 2016
ER -