Database Security Research And Application Based On Web Platform

In today's modern society,computer technology is developing so fast and Internet technology is also changing.These technology also poses a significant change to people's life style.Though Internet technology has brought great convenience to people,at the same time,they also has brought great threat to the people's life in the Internet.The threat to the user data is one of the biggest ones.In the environment of the Internet user's data is stored in the database,so the Web database security problem is especially prominent.To the database security problems based on Web Platform,this paper analyzes the database security protection technology,and further study of the identity authentication and data encryption technology in the Web system.I designed and implemented the database security management system based on Web platform,and assess database security management system synthetically.In this paper,the specific research work are as follows:(1)Analyzes the problems of database security based on Web Platform.Database system is often attacked from outside,deployed under the environment of network.And the data in the database is stored in the form of plaintext commonly,so it is easy to have a security issue because of human mismanagement.(2)Study on the technology of Web database security management,including identity authentication technology,access control technology,database encryption and database audit And put forward the user for data encryption technology in the Web page to choose its own encryption,decryption fields and authorization method.(3)Analyze the Java/JDBC source code and put forward methods for the improvement of JDBC source code.So it can use Web Service feedback of user authorization results on data sets.At the same time,design Web Service interaction model of remote Service platform.Use Web Service technology to parse the operation of the user database statement,and decode the database field.(4)Database security management system was designed and implemented.The system consists of a unified security management platform,Web Service-system and user program of three parts.Unified security management platform is responsible for the safety of the unified database server management.Web Service system is responsible for the operation of the business process to the user for processing and feedback.User business program is responsible for verifying field encryption function.(5)We evaluate the implementation system of the core functions effectively to achieve the desired effect.The system has the unified administration of the database security,authorized user selecting field encryption and decryption and characteristics.It can satisfy the request of the general data security management.