@inproceedings{a6d045bdc957401aa77b34254b7bd0bf,
title = "Tracking end-users in web databases",
abstract = "When a database is accessed via a web application, users usually receive a pooled connection to the database. From a database point of view, such a connection is always established by the same user (i.e. the web application) and specific data on the end user is not available. As a consequence, users' specific transactions cannot be audited and fine-grained access control cannot be enforced at the database level. In this paper we propose a method and a system which provide the ability to track the end users in web databases. The new method can be applied to legacy web applications without requiring any changes in their existing infrastructure. Furthermore, the new users tracking ability provides a basis for native database protection mechanisms, and intrusion detection systems.",
keywords = "DB users tracking, auditing, web users tracking",
author = "Boris Rozenberg and Yaron Gonen and Ehud Gudes and Nurit Gal-Oz and Erez Shmueli",
year = "2011",
month = nov,
day = "17",
doi = "10.1109/ICNSS.2011.6059966",
language = "American English",
isbn = "9781457704598",
series = "Proceedings - 2011 5th International Conference on Network and System Security, NSS 2011",
pages = "105--112",
booktitle = "Proceedings - 2011 5th International Conference on Network and System Security, NSS 2011",
note = "2011 5th International Conference on Network and System Security, NSS 2011 ; Conference date: 06-09-2011 Through 08-09-2011",
}