This presentation is the property of its rightful owner.
Sponsored Links
1 / 26

주요 데이터보안을 위한 KSignSecure DB 암호화 솔루션 제안 PowerPoint PPT Presentation


  • 364 Views
  • Uploaded on
  • Presentation posted in: General

주요 데이터보안을 위한 KSignSecure DB 암호화 솔루션 제안. 주요 데이터보안을 위한 KSignSecure DB 암호화 솔루션 제안. 제안 솔루션 소개. 케이사인 솔루션 소개 DB 암호화 [ Plug In] 구성방식 일반적인 DB 암호화 구축 방안. 4 . 암호화 구축방식별 비교 5 . 암호 키 관리 기능 6 . 접근제어 및 감사 기능 7 . DB 통합 관리 기능 8 . 감사 및 장애 복구 기능. KSignSecure DB 주요 기능.

Download Presentation

주요 데이터보안을 위한 KSignSecure DB 암호화 솔루션 제안

An Image/Link below is provided (as is) to download presentation

Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author.While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server.


- - - - - - - - - - - - - - - - - - - - - - - - - - E N D - - - - - - - - - - - - - - - - - - - - - - - - - -

Presentation Transcript


Ksignsecure db

KSignSecure DB

KSignSecure DB


Ksignsecure db

  • DB [Plug In]

  • DB

4.

5.

6.

7. DB

8.


Ksignsecure db

KSignSecure DB

KSign Secure DB

KsignSecureDB

KsignSecureDB

1. KSignSecure DB

KSignSecure DB

  • (SEED, TDES, AES, ARIA,Hash )

  • DBMS ,User

  • DBMS DB DBMS

  • DBMS

  • GUI , .

  • initialization Vector

  • / ( )

  • ,

  • , , (DBA ) RBAC

  • DBMS (Secure DB Agent)

  • RBAC

APP

  • DB IP//

  • GUI DBMS Event

  • ,

  • GS(Good Software) ,

  • ,


Ksignsecure db

  • KSignSecure DB .

2. DB [Plug In ]

GUI


Ksignsecure db

  • Ksign Secure DB .

2 .1 DB [Plug In ]

DB

PC

Admin

Server

TCP

9002

TCP

9001

Agent

USER ()

TCP

7070

USER ()

TCP

9003

SDB_USER ()

Policy

DB

extproc

Agent

Package

/

view

Client Tool


Ksignsecure db

  • Plug In DBMS

2.2 Plug In DB

Table : EMP

Unique Index

View : EMP

Unique Index

Table : SDB_EMP

Advanced Index


Ksignsecure db

  • Secure DB Plug In & API Hybrid .

Hybrid

Plug-in

API

DB

Hybrid

Hybrid

Secure API

Secure Agent

  • DB

  • DB

3. DB

2.1

  • - DB

  • WAS

  • -

API Plug-in

DBMS

WAS

Veiw


Ksignsecure db

  • KSignSecureDB Secure DB Plug In & API Hybrid .

Index

Index

DB

Veiw

5~ 10%

Secure Agent

```

3.1 DB

2.1

DBMS

Query

Secure Index

Query

Example

DB

DBMS

  • (, )

  • 15% DBMS

  • 12% DBMS

  • Searching

  • WAS


Ksignsecure db

2

1

DB

Secure API

Secure Agent

3.2 DB

2.1

( : 5 )

DBMS

WAS

80%

20%

Example

1

4

( : 5 )

DBMS

WAS

80%+(15~20%)

20%

  • 20%

1

40.8

20%

5~10%

BATCH

Rows

OLTP


Ksignsecure db

  • , (LOAD) . (LOAD) On-Line /Batch/File Batch/ I/F / .

1

3.3 __ 1

1

On-Line (%)

2

Batch (%)

3

File Batch (%)

/ /APP

(On-Line/Batch/

File Batch/ I/F /)

4

I/F (%)

5

(%)

SQL

SQL

SQL

SQL

+


Ksignsecure db

  • SQL , SQL SQL , SQL , SQL , SQL .

SQL

1

3

2

100

80

60

40

20

0

1

3

3.3 __ 2

SQL AP , CRUD .

DB

: ///

SQL / SQL

[AP SQL ]

SQL

+

+

SQL

[ ]

[ SQL]

[ ]

SQL

SQL

SQL

SQL

( )Full Scan Bind SQL


Ksignsecure db

  • DB , .

I/F

1

7

2

5

1

2

4

3

3

8

4

6

3.3 __ 3

50%

+

DB

20%

SMS

10%

20%

DB (MACHINE/AP SQL) , .

[ IP ]

[ AP ]

agent

[ ERD]

+

(PKI)

SSO

agent

SSO

Server

* ER

[ ]

[ ]

/ ITEM BACKORDERED

[ DB ]

Oracle SSO

Server

/ ITEM SHIPPED

ITEM

FAX

ITEM

ITEM


Ksignsecure db

  • , (Simple -> Complex), ( -> ), ( -> ) ,

1

3.3 _

  • OS Parameter

  • DB Parameter

  • I/F


Ksignsecure db

  • (1.5) , AP , On-Line /Batch/File Batch/ I/F / .

3.3 _


Ksignsecure db

  • , AP(SQL ) AP , , ( <-> )CPU//Logical IO/Physical IO SQL .

3.3 _

105%

DB AP(SQL )

.


Ksignsecure db

  • DB 4 Plug In & API Hybrid .

4. DB


Ksignsecure db

  • DBMS

4.1 DB


Ksignsecure db

  • DB()

4.2 DB


Ksignsecure db

  • DB DBMS .

5.

Policy Server(KMS)

DBMS Agent

Load Cert[Agent]

Gen Random M_Key

Gen Random C_Key

C_Key

,


Ksignsecure db

  • (Table, Column ) IP, , .

RABC

6.

SCOTT

SYSMAN

Role

Role

/

/

DB()

  • (TABLE ) (INSERT, UPDATE, DELETE, SELECT)

  • ROLE()

  • DB IP , ,


Ksignsecure db

  • DBMS , .

7. DB

DB

  • DBMS

  • DBMS/Table/Column

[DB ]

  • , IP , Application

  • DBMS, Table, Column, ,

Plug-In(Filter)

,

  • IP, ,

  • ,

DBMS

DBMS

DBMS

[DBMS]

[Policy Server]


Ksignsecure db

  • Object() Auto Roll back

Agent

Agent

DB

8.

DB

Secure DB

Server

or

1

2

DB

DB

  • (SELECT, INSERT, UPDATE, DELETE)

  • , DB , IP, , OS ,

  • DB DB Agent

  • DB Agent


Ksignsecure db

  • ( 1)


Ksignsecure db

  • DB

(G- )

1.

(S-)

()

()

  • ,

  • (2 )

  • 50 , 2 5

  • 60

  • : 300()

DB()

SPIN DB

DB Plug-In

DB

Application

Application

  • OLTP, Batch, Plug-In DB

  • Business Logic (Batch, Join, ) DB

  • OLTP, Batch, SPIN DB

  • , , , Zone


Ksignsecure db

2. ( 1)

* 150 DB


Ksignsecure db

237-1 403

TEL : 070-4213-8579, FAX : 02-455-8579

http://www.rbsoft.co.kr

: (010-9280-8579, [email protected])


  • Login