数据库安全研究现状与展望

Present Status and Trends of Researches on Database Security

        张敏(中国科学院软件研究所信息安全国家重点实验室)

         数据库安全;安全数据库管理系统;数据库-即-服务;海量信息处理

        database security;secure database management system;database-as-a-service;massive information processing

        数据库系统是当今大多数信息系统中数据存储和处理的核心。针对数据库系统的攻击将直接导致敏感与隐私信息泄露。开展数据库安全理论与技术研究,是实现数据库系统安全的迫切需求。文章通过总结与分析数据库安全的研究现状与发展趋势,认为我国在该领域与国际上的差距在不断缩小;当前既是数据库技术领域变革期,也是我国数据库安全领域研究的重要机遇期,并在此基础上提出了对策与建议。

        Database system is the core part of data storage and processing in the current information systems.Attacks towards the database systems will directly result in the leakage of sensitive or private data.Research on the theory and techniques of database security is a basic requirement of database protection.By surveying on the present status and developments of the database security,we conclude that the gap between overseas and China is narrowing now,and the changing and developing of the database technology is providing a great opportunity for the database security researcher in China.Several suggestions and propositions are promoted to improve the researches in China.