Abstract
We propose a project named “Database Security Using IDS”.SQL injection attack is the most common attack in websites nowa-days. SQL Injection refers to an injection attack wherein an attacker can execute malicious SQL statements that control a web application's database server. In this project we propose database intrusion detection mechanism to enhance the security of database through a Website. We will make a system which will log all the activities of an Intruder using SQL Injection in a website. Some malicious codes gets injected to the database by unauthorized users and because of this attack, the actual database can be stolen or destroyed or modified by the hacker. Administrator will be shown the details of the user and can block him if needed. User details are secured using AES encryption algorithm which makes this system more secure.
1 INTRODUCTION
ntrusion detection system detects the malicious activity in the database and notifies the administrator of the system accordingly. To secure data and detect malicious activities in database, intrusion detection system is integrated with the shopping site and detects malicious activities in site's database. Intrusion Detection System is a system in which malicious activity performed by any user or program is logged and can be viewed later by the admin. Anyone who gets access to the database login/password used by the application has the ability to frequently read or modify the database, bypassing all the security features built into the application. Therefore, security measures have been taken to ensure security at the application logic level, we need to have the ability to detect any malicious actions into the database. As a part of the project, a website will be developed where users can buy shopping products. Different users- Administrator and customer will have different access rights to the system. This project is a base project for developing a Intrusion Detection System related subsystem which can be used in any other application.
7 CONCLUSION
In the project “Database Security using IDS” we have proposed AES encryption approach to prevent the intrusion in database of the online shopping website. Also detects and prevents the intrusion attacks like SQL injection. It provides an additional layer of security in database management system (DBMS).It can be considered as generic approach for any database and overcomes the limitations of the existing database security mechanisms.
