US 2017/0318027 A1 · EFFECTIVELY VALIDATING DYNAMIC DATABASE QUERIES THROUGH DATABASE ACTIVITY MONITORING

Abstract

A database activity monitoring service, operating independent of a database server, in response to intercepting a database server response issued by the database server comprising a result set associated with a dynamic database query, extracts a first selection of data from the result set, the first selection of data identifying one or more dynamic query elements of the dynamic database query as constructed by the database server at runtime. The database activity monitoring service determines whether the one or more dynamic query elements comply with one or more security policies. The database activity monitoring service, in response to determining that the one or more dynamic query elements fail to comply with at least one of the one or more security policies, issues a security alert.

Claims20

Dependent claims

A method comprising:

in response to intercepting, by one or more computer systems, a database server response issued from a database server, extracting a first selection of data from the result set, the first selection of data identifying one or more dynamic query elements of the dynamic database query as constructed by the database server at runtime;
determining, by the one or more computer systems, whether the one or more dynamic query elements comply with one or more security policies;
and
in response to determining that the one or more dynamic query elements fail to comply with at least one of the one or more security policies, issuing, by the one or more computer systems, a security alert.

1 more element

A computer system comprising one or more processors, one or more computer-readable memories, one or more computer-readable storage devices, and program instructions, stored on at least one of the one or more storage devices for execution by at least one of the one or more processors via at least one of the one or more memories, the stored program instructions comprising:

program instructions to, in response to intercepting a database server response issued from a database server, extract a first selection of data from the result set, the first selection of data identifying one or more dynamic query elements of the dynamic database query as constructed by the database server at runtime;
program instructions to determine whether the one or more dynamic query elements comply with one or more security policies;
and
program instructions to, in response to determining that the one or more dynamic query elements fail to comply with at least one of the one or more security policies, issue a security alert.

1 more element

A computer program product comprising one or more computer-readable storage devices and program instructions, stored on at least one of the one or more storage devices, the stored program instructions comprising:

program instructions to, in response to intercepting a database server response issued from a database server, extract a first selection of data from the result set, the first selection of data identifying one or more dynamic query elements of the dynamic database query as constructed by the database server at runtime;
program instructions to determine whether the one or more dynamic query elements comply with one or more security policies;
and
program instructions to, in response to determining that the one or more dynamic query elements fail to comply with at least one of the one or more security policies, issue a security alert.

1 more element

Dependencies are inferred from the claim text.

Effectively validating dynamic database queries through database activity monitoring

Life of this patent

Effectively validating dynamic database queries through database activity monitoring

Life of this patent

Abstract

Claims20