Database Security in Private Database Clouds

Onur Cinar, R. Haluk Guncer, Adnan Yazici

Research output: Chapter in Book/Report/Conference proceedingConference contribution

2 Citations (Scopus)

Abstract

Cloud computing and cloud systems are very popular in today's Information Technology (IT) and systems and have grown very quickly. Cloud computing helps organizations solve increasing IT costs such as their licenses, power consumption, physical protection, by providing better standardization, higher benefit, greater performance, and quicker responses of information services. Carrying vital importance for our private and secret information, cloud systems must provide extra security solutions for database systems with organizations. While using firewalls, and intrusion detection systems on the network for external attacks, some improved access controls must be definitely decided for internal attacks as well. Using database transaction logs and audit can be very helpful on developing a database protection system. However, storing these logs may cause some serious storage and performance problems. Another problem is to manage multiple databases at the same time. In this study we introduce a new lightweight cloud-based database security solution by enhancing our previously developed database security solution, InfoFence, while managing many databases at the same time from a central point. The performance of our proposed database security system in a private cloud has been evaluated against one of the most commonly used products on the market, Oracle Audit Vault Server, and we show that our proposed solution has better performance results in our test environment.

Original languageEnglish
Title of host publicationICISS 2016 - 2016 International Conference on Information Science and Security
PublisherInstitute of Electrical and Electronics Engineers Inc.
ISBN (Electronic)9781509054930
DOIs
Publication statusPublished - Mar 23 2017
Event3rd International Conference on Information Science and Security, ICISS 2016 - Pattaya, Thailand
Duration: Dec 19 2016Dec 22 2016

Publication series

NameICISS 2016 - 2016 International Conference on Information Science and Security

Conference

Conference3rd International Conference on Information Science and Security, ICISS 2016
CountryThailand
CityPattaya
Period12/19/1612/22/16

Fingerprint

Cloud computing
Information technology
Data base
Information services
Intrusion detection
Security systems
Access control
Standardization
Information systems
Computer systems
Electric power utilization
Servers
Costs
Attack
Audit
Quick response
Firewall
License
Audit market
Intrusion detection system

Keywords

  • Database Security
  • InfoFence
  • Private Database Clouds

ASJC Scopus subject areas

  • Information Systems and Management
  • Safety, Risk, Reliability and Quality
  • Computer Networks and Communications

Cite this

Cinar, O., Guncer, R. H., & Yazici, A. (2017). Database Security in Private Database Clouds. In ICISS 2016 - 2016 International Conference on Information Science and Security [7885847] (ICISS 2016 - 2016 International Conference on Information Science and Security). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/ICISSEC.2016.7885847

Database Security in Private Database Clouds. / Cinar, Onur; Guncer, R. Haluk; Yazici, Adnan.

ICISS 2016 - 2016 International Conference on Information Science and Security. Institute of Electrical and Electronics Engineers Inc., 2017. 7885847 (ICISS 2016 - 2016 International Conference on Information Science and Security).

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Cinar, O, Guncer, RH & Yazici, A 2017, Database Security in Private Database Clouds. in ICISS 2016 - 2016 International Conference on Information Science and Security., 7885847, ICISS 2016 - 2016 International Conference on Information Science and Security, Institute of Electrical and Electronics Engineers Inc., 3rd International Conference on Information Science and Security, ICISS 2016, Pattaya, Thailand, 12/19/16. https://doi.org/10.1109/ICISSEC.2016.7885847
Cinar O, Guncer RH, Yazici A. Database Security in Private Database Clouds. In ICISS 2016 - 2016 International Conference on Information Science and Security. Institute of Electrical and Electronics Engineers Inc. 2017. 7885847. (ICISS 2016 - 2016 International Conference on Information Science and Security). https://doi.org/10.1109/ICISSEC.2016.7885847
Cinar, Onur ; Guncer, R. Haluk ; Yazici, Adnan. / Database Security in Private Database Clouds. ICISS 2016 - 2016 International Conference on Information Science and Security. Institute of Electrical and Electronics Engineers Inc., 2017. (ICISS 2016 - 2016 International Conference on Information Science and Security).
@inproceedings{4f315fe1d4c14657ab629417fb98c799,
title = "Database Security in Private Database Clouds",
abstract = "Cloud computing and cloud systems are very popular in today's Information Technology (IT) and systems and have grown very quickly. Cloud computing helps organizations solve increasing IT costs such as their licenses, power consumption, physical protection, by providing better standardization, higher benefit, greater performance, and quicker responses of information services. Carrying vital importance for our private and secret information, cloud systems must provide extra security solutions for database systems with organizations. While using firewalls, and intrusion detection systems on the network for external attacks, some improved access controls must be definitely decided for internal attacks as well. Using database transaction logs and audit can be very helpful on developing a database protection system. However, storing these logs may cause some serious storage and performance problems. Another problem is to manage multiple databases at the same time. In this study we introduce a new lightweight cloud-based database security solution by enhancing our previously developed database security solution, InfoFence, while managing many databases at the same time from a central point. The performance of our proposed database security system in a private cloud has been evaluated against one of the most commonly used products on the market, Oracle Audit Vault Server, and we show that our proposed solution has better performance results in our test environment.",
keywords = "Database Security, InfoFence, Private Database Clouds",
author = "Onur Cinar and Guncer, {R. Haluk} and Adnan Yazici",
year = "2017",
month = "3",
day = "23",
doi = "10.1109/ICISSEC.2016.7885847",
language = "English",
series = "ICISS 2016 - 2016 International Conference on Information Science and Security",
publisher = "Institute of Electrical and Electronics Engineers Inc.",
booktitle = "ICISS 2016 - 2016 International Conference on Information Science and Security",
address = "United States",

}

TY - GEN

T1 - Database Security in Private Database Clouds

AU - Cinar, Onur

AU - Guncer, R. Haluk

AU - Yazici, Adnan

PY - 2017/3/23

Y1 - 2017/3/23

N2 - Cloud computing and cloud systems are very popular in today's Information Technology (IT) and systems and have grown very quickly. Cloud computing helps organizations solve increasing IT costs such as their licenses, power consumption, physical protection, by providing better standardization, higher benefit, greater performance, and quicker responses of information services. Carrying vital importance for our private and secret information, cloud systems must provide extra security solutions for database systems with organizations. While using firewalls, and intrusion detection systems on the network for external attacks, some improved access controls must be definitely decided for internal attacks as well. Using database transaction logs and audit can be very helpful on developing a database protection system. However, storing these logs may cause some serious storage and performance problems. Another problem is to manage multiple databases at the same time. In this study we introduce a new lightweight cloud-based database security solution by enhancing our previously developed database security solution, InfoFence, while managing many databases at the same time from a central point. The performance of our proposed database security system in a private cloud has been evaluated against one of the most commonly used products on the market, Oracle Audit Vault Server, and we show that our proposed solution has better performance results in our test environment.

AB - Cloud computing and cloud systems are very popular in today's Information Technology (IT) and systems and have grown very quickly. Cloud computing helps organizations solve increasing IT costs such as their licenses, power consumption, physical protection, by providing better standardization, higher benefit, greater performance, and quicker responses of information services. Carrying vital importance for our private and secret information, cloud systems must provide extra security solutions for database systems with organizations. While using firewalls, and intrusion detection systems on the network for external attacks, some improved access controls must be definitely decided for internal attacks as well. Using database transaction logs and audit can be very helpful on developing a database protection system. However, storing these logs may cause some serious storage and performance problems. Another problem is to manage multiple databases at the same time. In this study we introduce a new lightweight cloud-based database security solution by enhancing our previously developed database security solution, InfoFence, while managing many databases at the same time from a central point. The performance of our proposed database security system in a private cloud has been evaluated against one of the most commonly used products on the market, Oracle Audit Vault Server, and we show that our proposed solution has better performance results in our test environment.

KW - Database Security

KW - InfoFence

KW - Private Database Clouds

UR - http://www.scopus.com/inward/record.url?scp=85018269560&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85018269560&partnerID=8YFLogxK

U2 - 10.1109/ICISSEC.2016.7885847

DO - 10.1109/ICISSEC.2016.7885847

M3 - Conference contribution

T3 - ICISS 2016 - 2016 International Conference on Information Science and Security

BT - ICISS 2016 - 2016 International Conference on Information Science and Security

PB - Institute of Electrical and Electronics Engineers Inc.

ER -