Database context-based intrusion detection
AssigneeSentrigo Inc.
InventorSlavik Markovich
Life of this patent
Estimating the term…
Abstract
A method for detecting an unauthorized action in a database, the method comprising estimating correlation between a predicted result of an intercepted database statement and at least one context parameter associated with the database statement, wherein lack of correlation indicates the database statement being associated with an unauthorized action.
Claims30
A computer-based method for detecting an unauthorized action in a database, the method comprising estimating, by a computing device, correlation between a predicted result of an intercepted database statement and at least one context parameter indicating an origin of the database statement, wherein lack of correlation indicates the database statement being associated with an unauthorized action.
A non-transitory database intrusion detector, comprising:
- a computing device including an interception module adapted to intercept a database statement prior to its execution in a database;
- an interface module adapted to obtain at least one context parameter indicating an origin of said database statement;
- and
- control logic adapted to predict a result of said database statement and to estimate correlation between said at least one context parameter and said result, wherein lack of correlation indicates the database statement being associated with an intrusion to the database.
A computing system comprising:
- a computing device configured to estimate correlation between a predicted result of an intercepted database statement and at least one context parameter indicating an origin of the database statement, and based on said correlation to determine that the database statement is associated with an unauthorized action.
Dependencies are inferred from the claim text.