DBKnot: A Transparent and Seamless, Pluggable Tamper Evident Database

الموضوعات

علوم تطبيقية وتكنولوجية

الملخص

Database integrity is crucial to organizations that rely on databases of important data. They suffer from the vulnerability to internal fraud. Database tampering by internal malicious employees with high technical authorization to their infrastructure or even compromised by externals is one of the important attack vectors. This thesis addresses such challenge in a class of problems where data is appended only and is immutable. Examples of operations where data does not change is a) financial institutions (banks, accounting systems, stock market, etc., b) registries and notary systems where important data is kept but is never subject to change, and c) system logs that must be kept intact for performance and forensic inspection if needed. The target of the approach is implementation seamlessness with little-or-no changes required in existing systems. Transaction tracking for tamper detection is done by utilizing a common hashtable that serially and cumulatively hashes transactions together while using an external time-stamper and signer to sign such linkages together. This allows transactions to be tracked without any of the organizations’ data leaving their premises and going to any third-party which also reduces the performance impact of tracking. This is done so by adding a tracking layer and embedding it inside the data workflow while keeping it as un-invasive as possible. DBKnot implements such features a) natively into databases, or b) embedded inside Object Relational Mapping (ORM) frameworks, and finally c) outlines a direction of implementing it as a stand-alone microservice reverse-proxy. A prototype ORM and database layer has been developed and tested for seamlessness of integration and ease of use. Additionally, different models of optimization by implementing pipelining parallelism in the hashing/signing process have been tested in order to check their impact on performance. Stock-market information was used for experimentation with DBKnot and the initial results gave a slightly less than 100% increase in transaction time by using the most basic, sequential, and synchronous version of DBKnot. Signing and hashing overhead does not show significant increase per record with the increased amount of data. A number of different alternate optimizations were done to the design that via testing have resulted in significant increase in performance.

روابط وملفات

التعريف والنوع

رقم الوثيقة

f4d64438-bd44-4515-86e2-6ac99b3c8ac3

رقم العقد

0

نوع الوسائط

Crawler

نوع المحتوى

الرسائل العلمية

صيغة المصدر

رسائل ماجيستير

نوع الملف

pdf text

أسماء الملفات

845682_2.pdf

بيانات النشر

ألقاب المؤلفين

[{"name_ar":"Islam Khalil ","title_ar":"اعداد","title_en":"Preparation"},{"name_ar":"Karim Sobh","title_ar":"اشراف","title_en":"Supervision"},{"name_ar":"Sherif El Kassas ","title_ar":"اشراف","title_en":"Supervision"}]

اللغة

English

المصدر والدورية

اسم المصدر

DBKnot: A Transparent and Seamless, Pluggable Tamper Evident Database

المحتوى والصفحات

عدد الصفحات

0

إشراف وإعداد

الإشراف

Karim Sobh, Sherif El Kassas

الإعداد

Islam Khalil

الاقتباسات الببليوغرافية