KsignSecureDB(Plug in SPIN) V1.5

1. 2. Market Share 3.

1.

1999 11 BBB25.21 2 3

DB

PKI

1 2 Q/A

1 1 2 2PKI PKI 1 2

DB / PKI

68

(2011

6

)

/

86%

3

Copy Right 2011 Ksign Co.Ltd

2.2010Market Share (2010)

MarketShare /MarketShare Secure DBGS1 (13%) (45%)

5

I

S

(7%) 2 P D (14%)

4

S

X

(8%) 3 E C (13%)

2009 ( Secure DB 15.7 ) (

2010 ) 25.2 40.9

: 2008.12 2009 - 2011 DB 1 ( 1 , SAP 1 )

/ GS

DB

(

)

4


2.

MarketShare /SAP

II.

5


3.KSIGNPKI( 5 (OPEN Web & , , , ), CA, RA

) : Ksign Case

SSO/EAM : KsignAccess

3.0GS

, , / G/W, , ,

80% 1 , SSO

DB

: Ksign Secure DB 1.5 & Secure DB for SAP& TTA GS & , , , , (40 , 100 DB , ( DB , S ) G-ERP , , , , Site , , CC, , , , ,

), CC S *

6


1. DB-> / -> ARIA, SEED, TEDS, AES, Hash DBMS -> - > View , SQL Injection Ksign SecureDB SPIN View View Data Type DBMS App Size Batch -> Object (ARIA, SEED, TEDS, AES, Hash) / Ksign Plug-In , , Ksign DB(API) API ( ) Ksignvs

Object ,

Triger

App

DB (DB )

(Oracle, MS-SQL, DB2, Sybase, Informix, MySQL, Teradata) Oracle(Plug-In), MS-SQL, DB2, Tibero(1/2 Plug-In), DB (Data Masking) 8 KsignCopy Right 2011 Ksign Co.Ltd

SQL Injection

Ksign

2.

/.API Plug-In SPIN

API API e*M$b@^s%&d7 e *M$b@^s%&d7

View ,720403-1abzefhf

Index Batch

DB

9

SPINe *720403-1024678f

SPINSPIN DBDB

DBMS Plug-In Batch

/

3. DBDB API Ksign 1 DB Plug-InKsign

2

DB HybridKsign

3

DB

4 SPIN Ksign

:

:

Plug-In API Plug-In ( Application DBMS /

:

Application

Application ( Query DML

) ,

)

Query

SPIN SQL Plug-In

(

)

( )

(Plug In )

:

.

: (

,

, )

: ,

,

:

,

,

Simple & Small Size

Middle Size Batch

Size

10

4. Ksign SecureDBKSign Secure DBKsignSecureDB KSignSecure DB DBMS DBMS DBMS GUI DB DBMS , ,User

[Plug InKSignSecure DB

]

(SEED, TDES, AES, ARIA )

.

initialization Vector

KsignSecureDB

/ ) , RBAC DBMS GUI (Secure DB Agent) ,

( (DBA )

,

RBAC

APPDBMS Event

DB

IP/

/

,

GS(Good Software)

11

4. DBKSignSecure DB .

[Plug In

]

GUI

12


4.DBKsign Secure DB .

[Plug In

]

DB

PC

Server TCP 9002 USER ( ) Agent TCP 7070 TCP 9001

Admin

USER (

) SDB_USER ( ) Policy DB extproc / view Agent Package

TCP 9003

Client Tool

13


5.Secure DB

DB Plug In & API .

[Plug InHybrid

]

2.1

HybridAPI

Plug-in

DBMS DBMS

/

Searching DBMS API Plug-in

DBMS

DBMS

key Full Scan DB

API

Plug-in

Hybrid

- DB

Key

DBMS

WASDB

DB

API Plug-in

-

API

Hybrid

DB WAS

DBMSVeiw Secure Agent

Secure API

14


6.(LOAD) , On-Line

_/Batch/File Batch/ I/F /

_(LOAD)

1. .

1 On-Line 2 (%)

1 / File Batch/ /APP (On-Line/Batch/ I/F / )3

Batch

(%)

On-Line (%)

: 90%, : 0%

File Batch 4 I/F 5

(%)

Batch(%)

(%)

: 0%, 50%

(%)

(IBM p690) Oracle 10.2.0.2 (CPU)1.3GHz *24 SQL SQL SQL SQL

File Batch (%)

: 5%, : 20%

SQL SELECT 20 UPDATE 3 DELETE 1

I/F (%)

: 5%, : 20%

a

a

a

+

(%)

: 0%, : 10%

15


6.SQL , ,

_SQL SQL ,

_SQL SQL

2, SQL .

SQL100

80

SQL AP CRUD0 1 3

60

, .

40

20

DB : SQL / / / / SQL

3[AP

SQL

]

SQL SQL SQL SQL

+SQL SQL

+1 [ ] 2[ SQL] [( )Full Scan Bind q SQL

]

16


6.DB

_

_,

3.

I/F50% 20%

+3 [ IP ]

DBSMS 10% 20%

DB

(MACHINE/AP

SQL) , . 4 [ AP ]

[1agent

ERD]

* ER/ ITEM BACKORDERED

4 8 5 3SSO (PKI)agent

+FAX

/ ITEM SHIPPED

ITEM ITEM ITEM

2

SSO Server

6 7Oracle SSO Server

1 [

][2

]

[

DB

]

17


6., ( -> ) ,

_(Simple -> Complex), ( -> ),

1

OS Parameter DB Parameter

I/F

18


6.Line (1.5 ) /Batch/File Batch/ I/F /

_, . AP , On-

19


6., AP(SQL ) ,( .

_)CPU/ AP /Logical IO/Physical IO , SQL

105% q

DB AP(SQL . )

20


7. DBDBMS , .

DB DBMS DBMS/Table/Column

, IP

, Application

DBMS, Table, Column, , Plug-In(Filter) IP, DBMS DBMS [DBMS] [Policy Server] DBMS , ,

,

21


7.IP, , .

RBAC

SCOTT

SYSMAN

Role

Role

/ / DB( )

) SELECT)

(TABLE (INSERT, UPDATE, DELETE,

ROLE( DB IP , ,

)

22


7.Object( ) Auto Roll back

DBDBSecure DB Server

1

or

2

23


7. DBDB

(G-

)

(S- )

,

50 60

,2

5 : 300 ( )

(2 Plug-In

)

SPIN DB

DB DB

DB(

)

Plug-In Business Logic

OLTP, Batch, DB (Batch, Join, DB ) ,

OLTP, Batch, DB , Zone ,

SPIN

24


7.DB , . DB , ,

,, (DB Table), (DBMS ) OS, DBMS, Server

Down Time Migration

DB

, ,, , Query

Index

Business Logic Query Query

, ,

View

130% ~ 500%

103%

25


8. DB Object . ( PIN SPIN

[SPIN].Data Size PIN / Index (PIN ), DBMS ( , join, range ) . (Column )PINl

)

/

750620-1042421 4214205706652459

S-PIN Server

SPIN720403-1abzefhf e*720403-1024678

750620-1alhkwZ 42AbcD570665eFgH

SPINSPIN DBDB

26


8.DB

[S-PIN] [SSPINCVCA

.

SPIN

Query

SPIN

DB 130% ~ 4500%

Business Logic

( Query

)

103%

: 10-2010-0123005 ( : 10-2011-0014216 (

) )

27


8.DB

DB,

[S-PIN] [SDB .

DBSPIN

SPIN

API Hybrid

(WEB/WAS)

Business Login

SPIN720403-1abzefhf e*720403-1024678

(Zone

)

DB DB DB DB SPIN DB

SPIN

DB

28

DB

DB (SPIN Server ) , DB Field Size


SPIN SQL Injection, App DB

DB

Batch Object

SPIN q

-> DB Ksign SecurePinMasking

/ Masking Index Masking Masking

29


Ksign SecureDB Ksign API, Plug-In, SPIN

Plug-In & API

Hybrid

SPIN & DB /

PIN(

)

SW(

/

)

DB Field Size

(Zone

)

DB )

(SPIN Server

30


GS

: 10-2010-0123005 ( : 10-2011-0014216 (

) )

31


SPIN DB !

Q & A.( ) DB / Tel : 070-7090-7906 Fax : 02-564-1627 Mobile : 010-8708-3292 E-mail : [email protected] Address : (135-080)

616-9

32


KsignSecureDB(Plug in SPIN) V1.5

Documents

Transcript of KsignSecureDB(Plug in SPIN) V1.5