1. 2. Market Share 3.

1.

1999 11 BBB25.2
1 2 3

DB

PKI

1 2 Q/A

1 1 2 2
PKI PKI 1 2

DB / PKI

68

(2011

86%

Copy Right 2011 Ksign Co.Ltd

2.
2010
Market Share (2010)

MarketShare /
MarketShare Secure DB
GS
1 (13%) (45%)

(7%) 2 P D (14%)

(8%) 3 E C (13%)

2009 ( Secure DB 15.7 ) (

2010 ) 25.2 40.9

: 2008.12 2009 - 2011 DB 1 ( 1 , SAP 1 )

/ GS

DB

Copy Right 2011 Ksign Co.Ltd

2.

MarketShare /
SAP

II.

Copy Right 2011 Ksign Co.Ltd

3.
KSIGN
PKI(
5 (OPEN Web & , , , ), CA, RA

) : Ksign Case

SSO/EAM : KsignAccess

3.0
GS

, , / G/W, , ,

80% 1 , SSO

DB

: Ksign Secure DB 1.5 & Secure DB for SAP

& TTA GS & , , , , (40 , 100 DB , ( DB , S ) G-ERP , , , , Site , , CC, , , , ,

), CC S *

Copy Right 2011 Ksign Co.Ltd

1. DB
-> / -> ARIA, SEED, TEDS, AES, Hash DBMS -> - > View , SQL Injection  Ksign SecureDB SPIN View View Data Type DBMS App Size Batch -> Object (ARIA, SEED, TEDS, AES, Hash) / Ksign Plug-In , , Ksign DB(API) API ( ) Ksign
vs

Object ,

Triger

App

DB (DB )

(Oracle, MS-SQL, DB2, Sybase, Informix, MySQL, Teradata) Oracle(Plug-In), MS-SQL, DB2, Tibero(1/2 Plug-In), DB (Data Masking) 8 Ksign
Copy Right 2011 Ksign Co.Ltd

SQL Injection

Ksign

2.

/
.
API Plug-In SPIN

API API e*M$b@^s%&d7 e *M$b@^s%&d7

View ,
720403-1abzefhf

Index Batch

DB

SPIN
e *720403-1024678f

SPIN
SPIN DB
DB

DBMS Plug-In Batch

3. DB
DB API Ksign 1 DB Plug-In
Ksign

DB Hybrid
Ksign

DB

4 SPIN Ksign

Plug-In API Plug-In ( Application DBMS /

Application

Application ( Query DML

) ,

Query

SPIN SQL Plug-In

( )

(Plug In )

: (

, )

: ,

Simple & Small Size

Middle Size Batch

Size

10

4. Ksign SecureDB
KSign Secure DB
KsignSecureDB KSignSecure DB

DBMS DBMS DBMS GUI DB DBMS , ,User

[Plug In
KSignSecure DB

(SEED, TDES, AES, ARIA )

initialization Vector

KsignSecureDB

/ ) , RBAC DBMS GUI (Secure DB Agent) ,

( (DBA )

RBAC

APP
DBMS Event

DB

IP/

GS(Good Software)

11

4. DB
KSignSecure DB .

[Plug In

GUI

12

Copy Right 2011 Ksign Co.Ltd

4.DB
Ksign Secure DB .

[Plug In

DB

PC

Server TCP 9002 USER ( ) Agent TCP 7070 TCP 9001

Admin

USER (

) SDB_USER ( ) Policy DB extproc / view Agent Package

TCP 9003

Client Tool

13

Copy Right 2011 Ksign Co.Ltd

5.
Secure DB

DB
Plug In & API .

[Plug In
Hybrid

2.1

Hybrid
API

Plug-in

DBMS DBMS

Searching DBMS API Plug-in

DBMS

DBMS

key Full Scan DB

API

Plug-in

Hybrid

- DB

Key

DBMS

WAS
DB

DB

API Plug-in

API

Hybrid

DB WAS

DBMS
Veiw Secure Agent

Secure API

14

Copy Right 2011 Ksign Co.Ltd

6.
(LOAD) , On-Line

_
/Batch/File Batch/ I/F /

_
(LOAD)

1
. .

1 On-Line 2 (%)

1 / File Batch/ /APP (On-Line/Batch/ I/F / )

3

Batch

(%)

On-Line (%)

: 90%, : 0%

File Batch 4 I/F 5

(%)

Batch
(%)

(%)

: 0%, 50%

(%)

(IBM p690) Oracle 10.2.0.2 (CPU)1.3GHz *24 SQL SQL SQL SQL

File Batch (%)

: 5%, : 20%

SQL SELECT 20 UPDATE 3 DELETE 1

I/F (%)

: 5%, : 20%

(%)

: 0%, : 10%

15

Copy Right 2011 Ksign Co.Ltd

6.
SQL , ,

_
SQL SQL ,

_
SQL SQL

2
, SQL .

SQL
100

80

SQL AP CRUD
0 1 3

60

, .

40

20

DB : SQL / / / / SQL

3[AP

SQL

SQL SQL SQL SQL

+
SQL SQL

+
1 [ ] 2[ SQL] [
( )Full Scan Bind q SQL

16

Copy Right 2011 Ksign Co.Ltd

6.
DB

_
,

3
.

I/F
50% 20%

+
3 [ IP ]

DB
SMS 10% 20%

DB

(MACHINE/AP

SQL) , . 4 [ AP ]

[
1
agent

ERD]

* ER
/ ITEM BACKORDERED

4 8 5 3
SSO (PKI)
agent

+
FAX

/ ITEM SHIPPED

ITEM ITEM ITEM

SSO Server

6 7
Oracle SSO Server

1 [

][2

DB

17

Copy Right 2011 Ksign Co.Ltd

6.
, ( -> ) ,

_
(Simple -> Complex), ( -> ),

OS Parameter DB Parameter

I/F

18

Copy Right 2011 Ksign Co.Ltd

6.
Line (1.5 ) /Batch/File Batch/ I/F /

_
, . AP , On-

19

Copy Right 2011 Ksign Co.Ltd

6.
, AP(SQL ) ,( <-> .

_
)CPU/ AP /Logical IO/Physical IO , SQL

105% q

DB AP(SQL . )

20

Copy Right 2011 Ksign Co.Ltd

7. DB
DBMS , .

DB DBMS DBMS/Table/Column

, IP

, Application

DBMS, Table, Column, , Plug-In(Filter) IP, DBMS DBMS [DBMS] [Policy Server] DBMS , ,

21

Copy Right 2011 Ksign Co.Ltd

7.
IP, , .

RBAC

SCOTT

SYSMAN

Role

Role

/ / DB( )

) SELECT)

(TABLE (INSERT, UPDATE, DELETE,

ROLE( DB IP , ,

22

Copy Right 2011 Ksign Co.Ltd

7.
Object( ) Auto Roll back

DB
DB
Secure DB Server

or

23

Copy Right 2011 Ksign Co.Ltd

7. DB
DB

(G-

(S- )

50 60

,2

5 : 300 ( )

(2 Plug-In

SPIN DB

DB DB

DB(

Plug-In Business Logic

OLTP, Batch, DB (Batch, Join, DB ) ,

OLTP, Batch, DB , Zone ,

SPIN

24

Copy Right 2011 Ksign Co.Ltd

7.
DB , . DB , ,

,
, (DB Table), (DBMS ) OS, DBMS, Server

Down Time Migration

DB

, ,
, , Query

Index

Business Logic Query Query

, ,

View

130% ~ 500%

103%

25

Copy Right 2011 Ksign Co.Ltd

8. DB
Object . ( PIN
SPIN

[SPIN]
.
Data Size PIN / Index (PIN ), DBMS ( , join, range ) . (Column )
PINl

750620-1042421 4214205706652459

S-PIN Server

SPIN
720403-1abzefhf e*720403-1024678

750620-1alhkwZ 42AbcD570665eFgH

SPIN
SPIN DB
DB

26

Copy Right 2011 Ksign Co.Ltd

8.
DB

[S-PIN] [SSPIN
CVCA

SPIN

Query

SPIN

DB 130% ~ 4500%

Business Logic

( Query

103%

: 10-2010-0123005 ( : 10-2011-0014216 (

) )

27

Copy Right 2011 Ksign Co.Ltd

8.
DB

DB
,

[S-PIN] [SDB .

DB
SPIN

SPIN

API Hybrid

(WEB/WAS)

Business Login

SPIN
720403-1abzefhf e*720403-1024678

(Zone

DB DB DB DB
SPIN DB

SPIN

DB

28

DB

DB (SPIN Server ) , DB Field Size

Copy Right 2011 Ksign Co.Ltd

  SPIN  SQL Injection, App DB

DB

 Batch    Object

SPIN q

-> DB Ksign SecurePin

Masking

/  Masking Index Masking   Masking

29

Copy Right 2011 Ksign Co.Ltd

Ksign SecureDB
Ksign API, Plug-In, SPIN

Plug-In & API

Hybrid

SPIN & DB /

PIN(

SW(

DB Field Size

(Zone

DB )

(SPIN Server

30

Copy Right 2011 Ksign Co.Ltd


GS

: 10-2010-0123005 ( : 10-2011-0014216 (

) )

31

Copy Right 2011 Ksign Co.Ltd

SPIN DB !

Q & A
.
( ) DB / Tel : 070-7090-7906 Fax : 02-564-1627 Mobile : 010-8708-3292 E-mail : yhchoi@ksign.com Address : (135-080)

616-9

32

Copy Right 2011 Ksign Co.Ltd