Access数据库加密系统安全性剖析及改进策略

MSAccess是国内中小型企业的MIS广泛采用的数据库系统,它开发和维护都很方便,而且数据处理功能强大,是目前应用最为广泛地中小型数据库系统。但是由于其在加密方面设计欠周密,造成用户可以通过日期字段等方式对隐藏的密钥进行还原,使之成为该种数据库系统首要安全问题。笔者对其加密系统的漏洞和各种获取Access数据库密码的方式进行分析,提出一种通用的动态密钥空间加密技术改进和保护同类问题数据库系统。该技术具有密码保护的通用性和确保加密信息安全的特殊性;必定能为目前广大的MSAccess用户现存的数据安全问题的解决提供良好的思路和实施方法。同时它也给具有类似安全漏洞的大型数据库的加密体系的设计提供一个极好的新策略。

Security in MS Access and Its Improvement Strategy

MS Access is a kind of widely used database especially in small and middle scale enterprises due to its advantages and acceptable price. However, its weak key encryption caused a serious security problem. Some hacker software could use this fault to get the database password by illegal method. How to protect such a database is the purpose of this article. After knowing how the hacker software works, a good way to prevent the password from stealing and protect the important data could be found, that is the space storing key encryption technology. This method could also be used in other similar database.