Auditing of database search queries for privileged data
AssigneeInternational Business Machines Corporation
InventorsCraig S. Aldrich, Mark J. Anderson
Life of this patent
Estimating the term…
Abstract
An approach for identifying privileged access to a database is provided. A processor receives a query plan to search the database. A processor determines the query plan includes a request that accesses privileged data. A processor generates an updated query plan with an indication of the request that accesses privileged data. A processor sends the updated query plan for an audit of the query plan.
Claims18
A computer-implemented method for identifying privileged access to a database, the method comprising:
- receiving, by one or more processors, a query plan from a query request user to search the database;
- determining, by the one or more processors, the query plan includes a request that accessed privileged data in the database, wherein the database indicates for the request, which rows and columns of one or more tables of data have the privileged data;
- in response to determining the query plan includes the request that accessed privileged data generating, by the one or more processors, an updated query plan that includes both:
- (i) the request that accessed privileged data, and (ii) an indication of the request that accessed privileged data, wherein the indication indicates one or more operations of the query plan that accessed the privileged data, the query request user and an access time of the query plan;
- and
- sending, by the one or more processors, the updated query plan for an audit of the query plan, wherein the audit enables analysis of the query plan that accessed privilege data by an audit program.
A computer program product for identifying privileged access to a database, the computer program product comprising:
- one or more computer-readable storage media and program instructions stored on the one or more computer-readable storage media, the program instructions comprising:
- program instructions to receive a query plan from a query request user to search the database;
- program instructions to determine the query plan includes a request that accessed privileged data in the database, wherein the database indicates for the request, which rows and columns of one or more tables of data have the privileged data;
- program instructions to generate, in response determining the query plan includes the request that accessed privileged data an updated query plan that includes both:
- (i) the request that accessed privileged data, and (ii) an indication of the request that accessed privileged data, wherein the indication indicates one or more operations of the query plan that accessed the privileged data, the query request user and an access time of the query plan;
- and
- program instructions to send the updated query plan for an audit of the query plan, wherein the audit enables analysis of the query plan that accessed privilege data by an audit program.
A computer system for identifying privileged access to a database, the computer system comprising:
- one or more processors;
- one or more computer readable storage media;
- and
- program instructions stored on the computer readable storage media for execution by at least one of the one or more processors, the program instructions comprising:
- program instructions to receive a query plan from a query request user to search the database;
- program instructions to determine the query plan includes a request that accessed privileged data in the database, wherein the database indicates for the request, which rows and columns of one or more tables of data have the privileged data;
- program instructions to generate, in response to the request that accessed privileged data an updated query plan that includes both:
- (i) the request that accessed privileged data, and (ii) an indication of the request that accessed privileged data, wherein the indication indicates one or more operations of the query plan that accessed the privileged data, the query request user and an access time of the query plan;
- and
- program instructions to send the updated query plan for an audit of the query plan, wherein the audit enables analysis of the query plan that accessed privilege data by an audit program.
Dependencies are inferred from the claim text.