Dynamic data recovery for database systems based on fine grained transaction log

ABSTRACT

Data recovery techniques for malicious transactions are increasingly becoming an important issue since the security for DBMSs are mainly prevention based, and they cannot defend systems from unknown attacks. Survivability and availability are essential for modern DBMSs, which require the database provide continuous services in the period of recovery, namely dynamic recovery. In this paper, we presented a data recovery model and introduce extended read-write dependency and phantoms dependency to the model. A fine grained transaction log is proposed for data recovery. The log records all the data items of the read and update-involved operations for the committed transactions, and even extracts data items read by the subqueries in the SQL statements. Based on the log, we develop a dynamic recovery system to implement the data recovery model. The system could provide continuous services while the recovery is processing. Experiments based on TPC-W benchmark show that the dynamic recovery system is high-efficient and reliable.

REFERENCES

• 1: Paul Ammann , Sushil Jajodia , Peng Liu, Recovery from Malicious Transactions, IEEE Transactions on Knowledge and Data Engineering, v.14 n.5, p.1167-1185, September 2002 [doi>10.1109/TKDE.2002.1033782]
• 2: Peng Liu, Architectures for Intrusion Tolerant Database Systems, Proceedings of the 18th Annual Computer Security Applications Conference, p.311, December 09-13, 2002
• 3: Peng Liu , Paul Ammann , Sushil Jajodia, Rewriting Histories: Recovering from Malicious Transactions, Distributed and Parallel Databases, v.8 n.1, p.7-40, Jan. 2000 [doi>10.1023/A:1008731200105]
• 4: Luenam, P., and Liu, P. 2001. ODAM: An On-the-fly Damage Assessment and Repair System for Commercial Database Applications. Technical Report. Dept. of Information Systems, UMBC.
• 5: Brajendra Panda , Joe Giordano, An overview of post information warfare data recovery, Proceedings of the 1998 ACM symposium on Applied Computing, p.253-254, February 27-March 01, 1998, Atlanta, Georgia, United States [doi>10.1145/330560.330696]
• 6: Tzi-cker Chiueh , Dhruv Pilania, Design, Implementation, and Evaluation of A Repairable Database Management System, Proceedings of the 20th Annual Computer Security Applications Conference, p.179-188, December 06-10, 2004 [doi>10.1109/CSAC.2004.15]
• 7: Rajesh Yalamanchili , Brajendra Panda, Transaction fusion: a model for data recovery from information attacks, Journal of Intelligent Information Systems, v.23 n.3, p.225-245, November 2004 [doi>10.1023/B:JIIS.0000047393.99078.c4]
• 8: Wang, H. and Liu, P. 2006. Modeling and Evaluating the Survivability of an Intrusion Tolerant Database System. Lecture Notes in Computer Science. Volume 4189 (2006), 207--224.
• 9: Meng Yu , Peng Liu , Wanyu Zang, Self-Healing Workflow Systems under Attacks, Proceedings of the 24th International Conference on Distributed Computing Systems (ICDCS'04), p.418-4025, March 24-26, 2004

INDEX TERMS

Primary Classification:
  H. Information Systems
  H.2 DATABASE MANAGEMENT
      H.2.7 Database Administration
          Subjects: Data dictionary/directory

Additional Classification:
  H. Information Systems
  H.2 DATABASE MANAGEMENT
      H.2.7 Database Administration
          Subjects: Security, integrity, and protection; Logging and recovery

General Terms:
Design, Management, Performance, Reliability, Security

Keywords:
dynamic recovery, extended read-write dependency, phantoms