Professional Documents
Culture Documents
KsignSecureDB (Plug in SPIN) V1.5
KsignSecureDB (Plug in SPIN) V1.5
1.
1999 11 BBB25.2
1 2 3
DB
PKI
1 2 Q/A
1 1 2 2
PKI PKI 1 2
DB / PKI
68
(2011
86%
2.
2010
Market Share (2010)
MarketShare /
MarketShare Secure DB
GS
1 (13%) (45%)
(7%) 2 P D (14%)
(8%) 3 E C (13%)
/ GS
DB
2.
MarketShare /
SAP
II.
3.
KSIGN
PKI(
5 (OPEN Web & , , , ), CA, RA
) : Ksign Case
SSO/EAM : KsignAccess
3.0
GS
, , / G/W, , ,
80% 1 , SSO
DB
), CC S *
1. DB
-> / -> ARIA, SEED, TEDS, AES, Hash DBMS -> - > View , SQL Injection Ksign SecureDB SPIN View View Data Type DBMS App Size Batch -> Object (ARIA, SEED, TEDS, AES, Hash) / Ksign Plug-In , , Ksign DB(API) API ( ) Ksign
vs
Object ,
Triger
App
DB (DB )
(Oracle, MS-SQL, DB2, Sybase, Informix, MySQL, Teradata) Oracle(Plug-In), MS-SQL, DB2, Tibero(1/2 Plug-In), DB (Data Masking) 8 Ksign
Copy Right 2011 Ksign Co.Ltd
SQL Injection
Ksign
2.
/
.
API Plug-In SPIN
View ,
720403-1abzefhf
Index Batch
DB
SPIN
e *720403-1024678f
SPIN
SPIN DB
DB
3. DB
DB API Ksign 1 DB Plug-In
Ksign
DB Hybrid
Ksign
DB
4 SPIN Ksign
Application
) ,
Query
( )
(Plug In )
: (
, )
: ,
Size
10
4. Ksign SecureDB
KSign Secure DB
KsignSecureDB KSignSecure DB
DBMS DBMS DBMS GUI DB DBMS , ,User
[Plug In
KSignSecure DB
initialization Vector
KsignSecureDB
( (DBA )
RBAC
APP
DBMS Event
DB
IP/
GS(Good Software)
11
4. DB
KSignSecure DB .
[Plug In
GUI
12
4.DB
Ksign Secure DB .
[Plug In
DB
PC
Admin
USER (
TCP 9003
Client Tool
13
5.
Secure DB
DB
Plug In & API .
[Plug In
Hybrid
2.1
Hybrid
API
Plug-in
DBMS DBMS
DBMS
DBMS
API
Plug-in
Hybrid
- DB
Key
DBMS
WAS
DB
DB
API Plug-in
API
Hybrid
DB WAS
DBMS
Veiw Secure Agent
Secure API
14
6.
(LOAD) , On-Line
_
/Batch/File Batch/ I/F /
_
(LOAD)
1
. .
1 On-Line 2 (%)
Batch
(%)
On-Line (%)
: 90%, : 0%
(%)
Batch
(%)
(%)
: 0%, 50%
(%)
(IBM p690) Oracle 10.2.0.2 (CPU)1.3GHz *24 SQL SQL SQL SQL
: 5%, : 20%
I/F (%)
: 5%, : 20%
(%)
: 0%, : 10%
15
6.
SQL , ,
_
SQL SQL ,
_
SQL SQL
2
, SQL .
SQL
100
80
SQL AP CRUD
0 1 3
60
, .
40
20
DB : SQL / / / / SQL
3[AP
SQL
+
SQL SQL
+
1 [ ] 2[ SQL] [
( )Full Scan Bind q SQL
16
6.
DB
_
,
3
.
I/F
50% 20%
+
3 [ IP ]
DB
SMS 10% 20%
DB
(MACHINE/AP
SQL) , . 4 [ AP ]
[
1
agent
ERD]
* ER
/ ITEM BACKORDERED
4 8 5 3
SSO (PKI)
agent
+
FAX
/ ITEM SHIPPED
SSO Server
6 7
Oracle SSO Server
1 [
][2
DB
17
6.
, ( -> ) ,
_
(Simple -> Complex), ( -> ),
OS Parameter DB Parameter
I/F
18
6.
Line (1.5 ) /Batch/File Batch/ I/F /
_
, . AP , On-
19
6.
, AP(SQL ) ,( <-> .
_
)CPU/ AP /Logical IO/Physical IO , SQL
105% q
DB AP(SQL . )
20
7. DB
DBMS , .
DB DBMS DBMS/Table/Column
, IP
, Application
DBMS, Table, Column, , Plug-In(Filter) IP, DBMS DBMS [DBMS] [Policy Server] DBMS , ,
21
7.
IP, , .
RBAC
SCOTT
SYSMAN
Role
Role
/ / DB( )
) SELECT)
ROLE( DB IP , ,
22
7.
Object( ) Auto Roll back
DB
DB
Secure DB Server
or
23
7. DB
DB
(G-
(S- )
50 60
,2
5 : 300 ( )
(2 Plug-In
SPIN DB
DB DB
DB(
SPIN
24
7.
DB , . DB , ,
,
, (DB Table), (DBMS ) OS, DBMS, Server
DB
, ,
, , Query
Index
, ,
View
130% ~ 500%
103%
25
8. DB
Object . ( PIN
SPIN
[SPIN]
.
Data Size PIN / Index (PIN ), DBMS ( , join, range ) . (Column )
PINl
750620-1042421 4214205706652459
S-PIN Server
SPIN
720403-1abzefhf e*720403-1024678
750620-1alhkwZ 42AbcD570665eFgH
SPIN
SPIN DB
DB
26
8.
DB
[S-PIN] [SSPIN
CVCA
SPIN
Query
SPIN
DB 130% ~ 4500%
Business Logic
( Query
103%
: 10-2010-0123005 ( : 10-2011-0014216 (
) )
27
8.
DB
DB
,
[S-PIN] [SDB .
DB
SPIN
SPIN
API Hybrid
(WEB/WAS)
Business Login
SPIN
720403-1abzefhf e*720403-1024678
(Zone
DB DB DB DB SPIN DB
SPIN
DB
28
DB
DB
Batch Object
SPIN q
29
Ksign SecureDB
Ksign API, Plug-In, SPIN
Hybrid
SPIN & DB /
PIN(
SW(
DB Field Size
(Zone
DB )
(SPIN Server
30
GS
: 10-2010-0123005 ( : 10-2011-0014216 (
) )
31
SPIN DB !
Q & A
.
( ) DB / Tel : 070-7090-7906 Fax : 02-564-1627 Mobile : 010-8708-3292 E-mail : yhchoi@ksign.com Address : (135-080)
616-9
32