Exploring the intersection of network security and database communication: a PostgreSQL Socket Connection case study
DOI:
https://doi.org/10.62051/pzqebt34Keywords:
Network Security Vulnerabilities; PostgreSQL and Socket Connections; Webshell Detection and Attacks.Abstract
In this study, the network security of PostgreSQL database using Socket connection is deeply analyzed. By exploring Socket connections established by PostgreSQL over TCP, we find potential security threats and vulnerabilities during data transmission, which may expose database systems to network attacks such as unauthorized access and data leakage. In order to assess these security risks, this study simulated a variety of network attack scenarios, especially the implantation and detection of Webshell, to reveal the vulnerability of PostgreSQL to such network threats. Especially in defending against complex and changeable cyber threats such as Webshell attacks, this research also uses machine learning and artificial intelligence techniques to improve the automation level of security threat detection and response. These technologies can help identify complex attack patterns and improve resilience to emerging threats, thereby enhancing the overall security of PostgreSQL databases.
Downloads
References
Z. H. Lv, H. B. Yan, and R. Mei, "Automatic and Accurate Detection of Webshell Based on Convolutional Neural Network," in Cyber Security. CNCERT 2018. Communications in Computer and Information Science, vol 970, X. Yun, Ed. Singapore: Springer, 2019. [Online].
Q. Chen, X. Zhang, Y. Wang, Z. Zhai, and F. Yang, "Applying a Random Forest Approach to Imbalanced Dataset on Network Monitoring Analysis," in Cyber Security. CNCERT 2022. Communications in Computer and Information Science, vol 1699, W. Lu, Y. Zhang, W. Wen, H. Yan, and C. Li, Eds. Singapore: Springer, 2022.
P. M. R. Gumilang and D. W. Chandra, "Implementasi dan modifikasi WebShell untuk monitoring serangan berbasis website," AITI, 2021.
G. Supriyatno, "Searching for Forensic Evidence in a Compromised Virtual Web Server against SQL Injection Attacks and PHP Web Shell," 2018.
B. Cheng et al., "MSDetector: A Static PHP Webshell Detection System Based on Deep-Learning," in International Symposium on Theoretical Aspects of Software Engineering, Cham: Springer International Publishing, 2022.
B. R. Dawadi, B. Adhikari, and D. K. Srivastava, "Deep Learning Technique-Enabled Web Application Firewall for the Detection of Web Attacks," Sensors, vol. 23, no. 4, p. 2073, 2023.
"Protocol Overview," PostgreSQL 8.3 Documentation.
"CVE-2019-9193 Detail," National Vulnerability Database, NIST.
Downloads
Published
Conference Proceedings Volume
Section
License

This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License.







