Exploring the intersection of network security and database communication: a PostgreSQL Socket Connection case study

Authors

  • Shengke Ye
  • Kaiye Dai
  • Guoli Fan
  • Ling Zhang
  • Zhihao Liang

DOI:

https://doi.org/10.62051/pzqebt34

Keywords:

Network Security Vulnerabilities; PostgreSQL and Socket Connections; Webshell Detection and Attacks.

Abstract

In this study, the network security of PostgreSQL database using Socket connection is deeply analyzed. By exploring Socket connections established by PostgreSQL over TCP, we find potential security threats and vulnerabilities during data transmission, which may expose database systems to network attacks such as unauthorized access and data leakage. In order to assess these security risks, this study simulated a variety of network attack scenarios, especially the implantation and detection of Webshell, to reveal the vulnerability of PostgreSQL to such network threats. Especially in defending against complex and changeable cyber threats such as Webshell attacks, this research also uses machine learning and artificial intelligence techniques to improve the automation level of security threat detection and response. These technologies can help identify complex attack patterns and improve resilience to emerging threats, thereby enhancing the overall security of PostgreSQL databases.

Downloads

Download data is not yet available.

References

Z. H. Lv, H. B. Yan, and R. Mei, "Automatic and Accurate Detection of Webshell Based on Convolutional Neural Network," in Cyber Security. CNCERT 2018. Communications in Computer and Information Science, vol 970, X. Yun, Ed. Singapore: Springer, 2019. [Online].

Q. Chen, X. Zhang, Y. Wang, Z. Zhai, and F. Yang, "Applying a Random Forest Approach to Imbalanced Dataset on Network Monitoring Analysis," in Cyber Security. CNCERT 2022. Communications in Computer and Information Science, vol 1699, W. Lu, Y. Zhang, W. Wen, H. Yan, and C. Li, Eds. Singapore: Springer, 2022.

P. M. R. Gumilang and D. W. Chandra, "Implementasi dan modifikasi WebShell untuk monitoring serangan berbasis website," AITI, 2021.

G. Supriyatno, "Searching for Forensic Evidence in a Compromised Virtual Web Server against SQL Injection Attacks and PHP Web Shell," 2018.

B. Cheng et al., "MSDetector: A Static PHP Webshell Detection System Based on Deep-Learning," in International Symposium on Theoretical Aspects of Software Engineering, Cham: Springer International Publishing, 2022.

B. R. Dawadi, B. Adhikari, and D. K. Srivastava, "Deep Learning Technique-Enabled Web Application Firewall for the Detection of Web Attacks," Sensors, vol. 23, no. 4, p. 2073, 2023.

"Protocol Overview," PostgreSQL 8.3 Documentation.

"CVE-2019-9193 Detail," National Vulnerability Database, NIST.

Downloads

Published

10-04-2024

How to Cite

Ye, S. (2024) “Exploring the intersection of network security and database communication: a PostgreSQL Socket Connection case study”, Transactions on Computer Science and Intelligent Systems Research, 3, pp. 1–9. doi:10.62051/pzqebt34.