
Ð’ работе приведен обзор методов аутентификации, реализованных СУБД PostgreSQL, проведён ÑкÑперимент Ñ Ñ€Ð°Ð·Ð»Ð¸Ñ‡Ð½Ñ‹Ð¼Ð¸ методами. Ð’ ходе иÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ Ñ€ÐµÑˆÐ°Ð»Ð¸ÑÑŒ Ñледующие задачи: 1. Обзор методов аутентификации PostgreSQL; 2. Проведение ÑкÑперимента Ñ Ð°ÑƒÑ‚ÐµÐ½Ñ‚Ð¸Ñ„Ð¸ÐºÐ°Ñ†Ð¸ÐµÐ¹ методами PostgreSQL на РЕД ОС; 3. Сравнительный анализ ÑущеÑтвующих методов аутентификации в PostgreSQL; 4. ИÑÑледование методов аутентификации по одноразовому паролю; 5. Разработка метода аутентификации по одноразовому паролю Ð´Ð»Ñ PostgreSQL под Ubuntu 22.04 LTS. Работа разделена на 3 главы. ÐŸÐµÑ€Ð²Ð°Ñ Ð³Ð»Ð°Ð²Ð° поÑвÑщена раÑÑмотрению вÑтроенных методов PostgreSQL, иÑÑледованию их преимущеÑтв и недоÑтатков. Также, ÑтавитÑÑ Ð·Ð°Ð´Ð°Ñ‡Ð° раÑÑˆÐ¸Ñ€ÐµÐ½Ð¸Ñ ÑпиÑка методов Ñ Ð¿Ð¾Ð¼Ð¾Ñ‰ÑŒÑŽ динамичеÑки генерируемого паролÑ. Во второй главе раÑÑматриваютÑÑ Ñовременные методы аутентификации по динамичеÑки генерируемому паролю, иÑÑледуетÑÑ Ð²Ð¾Ð·Ð¼Ð¾Ð¶Ð½Ð¾Ñть реализации данных методов в PostgreSQL. Ð’ третьей главе раÑÑматриваетÑÑ ÑобÑÑ‚Ð²ÐµÐ½Ð½Ð°Ñ Ñ€ÐµÐ°Ð»Ð¸Ð·Ð°Ñ†Ð¸Ñ Ð¼ÐµÑ‚Ð¾Ð´Ð° аутентификации по динамичеÑки генерируемому паролю, иÑÑледован выбор механизмов Ð´Ð»Ñ Ñ€ÐµÐ°Ð»Ð¸Ð·Ð°Ñ†Ð¸Ð¸, иÑÑледована ÑффективноÑть данного метода Ñ Ñ‚Ð¾Ñ‡ÐºÐ¸ Ð·Ñ€ÐµÐ½Ð¸Ñ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑноÑти, Ñделан вывод о раÑширении реализованного метода и интеграции в другие СУБД.
The paper provides an overview of authentication methods implemented by the PostgreSQL DBMS and conducted an experiment with various methods. During the study, the following tasks were solved: 1. Overview of PostgreSQL authentication methods; 2. Conducting an experiment with authentication using PostgreSQL methods on RED OS; 3. Comparative analysis of existing authentication methods in PostgreSQL; 4. Research on one-time password authentication methods; 5. Development of a one-time password authentication method for PostgreSQL under Ubuntu 22.04 LTS. The work is divided into 3 chapters. The first chapter is devoted to a review of PostgreSQL built-in methods, exploring their advantages and disadvantages. Also, the task is to expand the list of methods using a dynamically generated password. The second chapter discusses modern methods of authentication using a dynamically generated password and explores the possibility of introducing these methods for implementation in PostgreSQL. The third chapter examines our own implementation of the authentication method using a dynamically generated password, examines the choice of mechanisms for implementation, examines the effectiveness of this method from a security point of view, and draws a conclusion about expanding the implemented method and integrating it into other DBMSs.
PostgreSQL, аÑÑенÑиÑикаÑиÑ, databases, password storage, authentication, Ð±Ð°Ð·Ñ Ð´Ð°Ð½Ð½ÑÑ, Ñ Ñанение паÑолей, RED OS, Ð ÐÐ ÐС, Ubuntu
PostgreSQL, аÑÑенÑиÑикаÑиÑ, databases, password storage, authentication, Ð±Ð°Ð·Ñ Ð´Ð°Ð½Ð½ÑÑ, Ñ Ñанение паÑолей, RED OS, Ð ÐÐ ÐС, Ubuntu
| selected citations These citations are derived from selected sources. This is an alternative to the "Influence" indicator, which also reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically). | 0 | |
| popularity This indicator reflects the "current" impact/attention (the "hype") of an article in the research community at large, based on the underlying citation network. | Average | |
| influence This indicator reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically). | Average | |
| impulse This indicator reflects the initial momentum of an article directly after its publication, based on the underlying citation network. | Average |
