Intrusion Detection-Based Access Control Algorithm for PostgreSQL Based on Front-End Back-End Protocols

다국어 초록 (Multilingual Abstract)

This study explores the feasibility of implementing a database (DB) access control solution by analyzing the PostgreSQLFront-End/Back-End (FEBE) protocol. To this end, algorithms were designed to extract session metadata and SQL text from startup, query,and parse packets. These algorithms enable control over user and database access, as well as SQL commands, including DML, DDL, andDCL types. The extraction process was validated using Apache JMeter, simulating concurrent SQL sessions. Results showed 100% accuracyacross 100 session tests and 200 SQL executions.Unlike conventional PostgreSQL DB security tools focused on auditing and logging, theproposed method emphasizes real-time detection and protocol-level analysis. It allows for session-aware filtering, SQL pattern-basedcontrol, and fine-grained object-level restriction. The study demonstrates that protocol-layer information can serve as a viable foundationfor developing PostgreSQL security solutions. Furthermore, this approach shows potential for extending to other open-source DBMSs,enhancing the scope and applicability of protocol-based security mechanisms.