防火墙、ids、ips的局限（The limitations of firewalls, IDS, and IPS）.doc

防火墙、ids、ips的局限（The limitations of firewalls, IDS, and IPS） Relational databases have become the most important component of their IT infrastructure for most businesses. Database storage and maintenance is the most precious Sapphire - data for businesses, and these data are driving forces for business. Because of the importance of databases, databases generally have built-in security features such as authentication, authorization, and management (known as 3A). However, in a few years ago was part of the database because the database has not feel safe relative to these security features but because the core of general database installed on the end of the IT infrastructure (Hou Duan), and the attacker will attack the previous focus on the other part. But now everything has changed. More and more cases show that the attackers have more and more interests of property, and they are very clear attack database is valuable, willing to devote enough time to study how without authority from the database to obtain valuable data or information. A variety of WEB applications (such as e-commerce, online banking, CRM) has been used more and more in the enterprise, has become an important support for enterprises of various production and management activities, but also the reform and the change of enterprise management mode and process, but the consequences are increased; the database leaks and the possibility of exposure. In addition to internal users and legitimate external users who can access data in the database, attackers can also access databases through available channels -- WEB applications such as IIS, Apache, and so on. Most of the existing business systems are multi-layer architecture system, multi-layer architecture under the environment of general users can not directly access the database (except DBA), but also access through the WEB application, is that the application of broad access to the database. This also means that any vulnerability that exists in the WEB appl