System and method for verifying database security across multiple platforms
AssigneeInternational Business Machines Corporation
InventorsKimberly DaShawn Simon, Jeffery Wijono
Life of this patent
Estimating the term…
Abstract
A system and method for verifying database security across multiple platforms is presented. Servers are queried to obtain a user id access list of a particular database, directory, or file. The user id access list is compared with a validated access list. A report file is generated that includes user id's that have access to a database, directory, or file but do not have proper permission. The report file includes a submission of how to correct each security violation.
Claims20
A method for analyzing database security, said method comprising:
- connecting to one or more servers, wherein each server includes an instance, the instance including one or more databases;
- selecting one of the databases;
- identifying a user id, wherein the user id has access to the selected databases;
- retrieving a permitted user id list corresponding to the selected database;
- determining whether the user id is included in the permitted user id list;
- reporting the user id in response to the determining.
An information handling system comprising:
- one or more processors;
- a memory accessible by the processors;
- one or more non-volatile storage devices accessible by the processors;
- a database analysis tool to analyze database security, the database analysis tool including:
- means for connecting to one or more servers, wherein each server includes an instance, the instance including one or more databases;
- means for selecting one of the databases;
- means for identifying a user id, wherein the user id has access to the selected databases;
- means fur retrieving a permitted user id list corresponding to the selected database;
- means for determining whether the user id is included in the permitted user id list;
- means for reporting the user id in response to the determining.
A computer program product stored in a computer operable media for analyzing database security, said computer program product comprising:
- means for connecting to one or more servers, wherein each server includes an instance, the instance including one or more databases;
- means for selecting one of the databases;
- means for identifying a user id, wherein the user id has access to the selected databases;
- means for retrieving a permitted user id list corresponding to the selected database;
- means for determining whether the user id is included in the permitted user id list;
- means for reporting the user id in response to the determining.
Dependencies are inferred from the claim text.