Light-Weight, Runtime Verification of Query Sources

Modern database systems increasingly make use of networked storage. This storage can be in the form of SAN's or in the form of shared-nothing nodes in a cluster. One type of attack on databases is arbitrary modification of data in a database through the file system, bypassing database access control. Additionally, for many applications, ensuring strict and definite authenticity of query source and results is required or highly desirable. In this paper, we propose a lightweight approach for verifying the minimum information that a database server needs from the storage system to execute a query. The verification is definite and produces high confidence results because of its online manner (i.e., the information is verified right before it is used). It is lightweight in three ways: (1) We use the Merkle hash tree data structure and fast cryptographic hash functions to ensure the verification itself is fast and secure; (2) We verify the minimum number of bytes needed to ensure the au...

• Type: Conference
• Year: 2009
• Where: ICDE
• Authors: Tingjian Ge, Stanley B. Zdonik
• Keywords: Database, Database Access Control, Definite Authenticity, Fast Cryptographic Hash, ICDE 2009, Merkle Hash Tree, Various Parameter Choices