Attribute-based detection of anomalous relational database queries
AssigneeOracle International Corporation
InventorsAnindya Chandra Patthak, Joydip Kundu
Life of this patent
Estimating the term…
Abstract
Techniques for detecting an anomaly in queries of a relational database are disclosed. The techniques include obtaining a set of semantic attributes for a query of a relational database. The semantic attributes are then used to calculate a set of similarities between the query and a set of non-anomalous queries of the relational database. When a highest similarity in the set of similarities does not meet a similarity threshold, an indication that the query is anomalous is outputted.
Claims20
A non-transitory computer readable medium comprising instructions which, when executed by one or more hardware processors, causes performance of operations comprising:
- obtaining a set of semantic attributes for a query of a relational database;
- using the set of semantic attributes to calculate a set of similarities between the query and a set of non-anomalous queries of the relational database;
- and
- when a highest similarity in the set of similarities does not meet a similarity threshold, outputting an indication that the query is anomalous.
A method, comprising:
- obtaining a set of semantic attributes for a query of a relational database;
- using the set of semantic attributes to calculate, by a computer system, a set of similarities between the query and a set of non-anomalous queries of the relational database;
- and
- when a highest similarity in the set of similarities does not meet a similarity threshold, outputting an indication that the query is anomalous.
An apparatus, comprising:
- one or more processors;
- and
- memory storing instructions that, when executed by the one or more processors, cause the apparatus to:
- obtain a set of semantic attributes for a query of a relational database;
- use the set of semantic attributes to calculate a set of similarities between the query and a set of non-anomalous queries of the relational database;
- and
- when a highest similarity in the set of similarities does not meet a similarity threshold, outputting an indication that the query is anomalous.
Dependencies are inferred from the claim text.