SQL proxy analyzer to detect and prevent unauthorized SQL queries

A method of a proxy apparatus for analyzing database queries in a secure network, comprising:

• receiving, by the proxy apparatus in an initial training mode, a plurality of training database queries from one or more computing apparatuses in the secure network via a computer network interface;
• identifying, by the proxy apparatus, at least a query source, a destination database, and a valid-query code for each of the plurality of training database queries, said valid-query code being identified based on one or more predetermined code libraries;
• assigning, by the proxy apparatus, a unique identifier for each unique valid-query code identified from the plurality of training database queries, said unique identifier being generated based at least upon a respective first checksum value corresponding to the each unique valid-query code and a predetermined algorithm;
• recording, in one or more memory storage devices, the assigned unique identifier, along with one or more unique combinations of the query source and the destination database associated with the each unique valid-query code, to a valid-query library;
• receiving, by the proxy apparatus in an operational mode, an operational database query from the secure network via the computer network interface;
• generating, by the proxy apparatus, an identifier for the received operational database query based at least upon a second checksum value corresponding to a query code of the received operational database query and the predetermined algorithm;
• identifying, by the proxy apparatus, a source and a destination of the received operation database query;
• comparing, by the proxy apparatus, the generated identifier, the identified source, and the identified destination to the valid-query library;
• when the comparing fails to match any entries in the valid-query library, terminating, by the proxy apparatus, the operational database query;
• when the comparing matches an entry in the valid-query library, relaying, by the proxy apparatus, the received operational database query based on the destination identification via the computer network interface;
• identifying, by the proxy apparatus in an exception mode, one or more rejected queries associated with an updated application code portion;
• and
• recording, by the proxy apparatus in the exception mode, one or more updated unique identifiers corresponding to the one or more rejected queries to the valid-query library, wherein
• the comparing compares a subsequently generated identifier of a subsequent operational database query associated with the updated application code portion to the one or more updated unique identifiers.

A proxy apparatus for analyzing database queries in a secure network, comprising:

• a computer network interface to the secure network;
• one or more processing devices operatively connected to the computer network interface;
• and
• one or more memory storage devices operatively connected to the one or more processing devices and having stored thereon machine-readable instructions that cause the one or more processing devices, when executed, to:
• receive, in an initial training mode, a plurality of training database queries from one or more computing apparatuses in the secure network via the computer network interface;
• identify at least a query source, a destination database, and a valid-query code for each of the plurality of training database queries, said valid-query code being identified based on one or more predetermined code libraries;
• assign a unique identifier for each unique valid-query code identified from the plurality of training database queries, said unique identifier being generated based at least upon a predetermined algorithm;
• record, in the one or more memory storage devices, the assigned unique identifier, along with one or more unique combinations of the query source and the destination database associated with the each unique valid-query code, to a valid-query library;
• receive, in an operational mode, an operational database query from the secure network via the computer network interface;
• generate an identifier for the received operational database query based at least upon a query code of the received operational database query;
• identify a source and a destination of the received operation database query;
• compare the generated identifier, the identified source, and the identified destination to the valid-query library;
• when the comparison fails to match any entries in the valid-query library, terminate the operational database query;
• and
• when the comparison matches an entry in the valid-query library, relay the received operational database query based on the destination identification via the computer network interface,
• wherein for assigning the unique identifier for the each unique valid-query code or for generating the identifier for the received operational database query, the proxy apparatus comprises one or more machine readable instructions stored on the one or more memory storage devices for causing, when executed, the one or more processing devices to:
• generate an application programming interface (API) to an application at the one or more computing apparatuses corresponding to the respective training database query or the respective operational database query;
• scan an application code portion associated with the respective training database query or the operational database query via the generated API;
• retrieve the one or more predetermined code libraries;
• and
• construct the valid-query code or the query code based on the scanned application code portion and the retrieved one or more predetermined code libraries.

A method of a proxy apparatus for analyzing database queries in a secure network, comprising:

• receiving, in an initial training mode, a plurality of training database queries from one or more computing apparatuses in the secure network via the computer network interface;
• identifying at least a query source, a destination database, and a valid-query code for each of the plurality of training database queries, said valid-query code being identified based on one or more predetermined code libraries;
• assigning a unique identifier for each unique valid-query code identified from the plurality of training database queries, said unique identifier being generated based at least upon a predetermined algorithm;
• recording, in the one or more memory storage devices, the assigned unique identifier, along with one or more unique combinations of the query source and the destination database associated with the each unique valid-query code, to a valid-query library;
• receiving, in an operational mode, an operational database query from the secure network via the computer network interface;
• generating an identifier for the received operational database query based at least upon a query code of the received operational database query;
• identifying a source and a destination of the received operation database query;
• comparing the generated identifier, the identified source, and the identified destination to the valid-query library;
• when the comparison fails to match any entries in the valid-query library, terminating the operational database query;
• and
• when the comparison matches an entry in the valid-query library, relaying the received operational database query based on the destination identification via the computer network interface,
• wherein for assigning the unique identifier for the each unique valid-query code or for generating the identifier for the received operational database query, the method comprises:
• generating an application programming interface (API) to an application at the one or more computing apparatuses corresponding to the respective training database query or the respective operational database query;
• scanning an application code portion associated with the respective training database query or the operational database query via the generated API;
• retrieving the one or more predetermined code libraries;
• and
• constructing the valid-query code or the query code based on the scanned application code portion and the retrieved one or more predetermined code libraries.