PFI-TT: Systematic Auditing of Database Activity

PFI-TT：数据库活动的系统审计

• 批准号: 2016548
• 负责人: Alexander Rasin
• 金额: $ 24.99万
• 依托单位: DePaul University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2020
• 资助国家: 美国
• 起止时间: 2020-08-15 至 2024-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2016548&HistoricalAwards=false
• 关键词: PFI; TT; Systematic; Auditing; Database

The broader impact/commercial potential of this Partnerships for Innovation - Technology Translation (PFI-TT) project is to improve detection of data breaches involving databases. A data breach can be extremely damaging to an organization; It may take months to detect the problem, further exacerbating the damage. Moreover, an attacker may take control of the computer system and disable its security and/or cover their tracks, delaying or avoiding detection. There are currently no software tools that address these problems for databases. This PFI project will contribute to the scientific understanding of database security analysis.The proposed project involves development of prototype software that uses digital forensic techniques to perform an automated audit of database storage to detect data integrity and compliance threats. Leveraging previous NSF-funded academic research, the proposed software can detect data breaches that are not detectable by current methods, thereby frustrating attempts by attackers to cause damage. Because the proposed technology is an automated tool, data breaches are detected very quickly. Moreover, by performing platform-agnostic forensic analysis, this software can be used to examine any data managed by a conventional, relational database management system.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

该创新-技术翻译合作伙伴关系（PFI-TT）项目的更广泛影响/商业潜力是改进涉及数据库的数据泄露的检测。数据泄露可能对组织造成极大的破坏;可能需要数月时间才能发现问题，进一步加剧了损害。此外，攻击者可以控制计算机系统并禁用其安全性和/或掩盖其踪迹，从而延迟或避免检测。目前没有软件工具可以解决数据库的这些问题。这个PFI项目将有助于对数据库安全分析的科学理解。拟议项目涉及开发原型软件，该软件使用数字取证技术对数据库存储进行自动审计，以检测数据完整性和合规性威胁。利用之前NSF资助的学术研究，拟议的软件可以检测到当前方法无法检测到的数据泄露，从而挫败攻击者造成损害的企图。由于所提出的技术是一种自动化工具，因此可以非常快速地检测到数据泄露。此外，通过执行与平台无关的取证分析，该软件可用于检查由传统关系数据库管理系统管理的任何数据。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

Purging Data from Backups by Encryption

通过加密从备份中清除数据

• DOI: 10.1007/978-3-030-86472-9_23
• 发表时间: 2021
• 期刊: International Conference on Database and Expert Systems Applications
• 作者: Scope, Nick;Rasin, Alexander;Wagner, James;Lenard, Ben;Heart, Karen
• 通讯作者: Heart, Karen

Harmonizing Privacy Regarding Data Retention and Purging

协调有关数据保留和清除的隐私

• DOI: 10.1145/3538712.3538718
• 发表时间: 2022
• 期刊: Harmonizing Privacy Regarding Data Retention and Purging
• 作者: Scope, Nick;Rasin, Alexander;Lenard, Ben;Heart, Karen;Wagner, James
• 通讯作者: Wagner, James

Purging Compliance from Database Backups by Encryption

通过加密清除数据库备份的合规性

• DOI: 10.26421/jdi3.1-4
• 发表时间: 2022
• 期刊: Journal of Data Intelligence
• 作者: Scope, Nick;Rasin, Alexander;Lenard, Ben;Wagner, James;Heart, Karen
• 通讯作者: Heart, Karen

Database Framework for Supporting Retention Policies

支持保留策略的数据库框架

• DOI: 10.1007/978-3-030-86472-9_21
• 发表时间: 2021
• 期刊: International Conference on Database and Expert Systems Applications
• 作者: Scope, Nick;Rasin, Alexander;Wagner, James;Lenard, Ben;Heart, Karen
• 通讯作者: Heart, Karen

What Is Lurking in Your Backups?

您的备份中潜藏着什么？

• DOI: 10.1007/978-3-030-78120-0_26
• 发表时间: 2021
• 期刊: IFIP International Conference on ICT Systems Security and Privacy Protection
• 作者: Lenard, Ben;Rasin, Alexander;Scope, Nick;Wagner, James
• 通讯作者: Wagner, James