首页>
外国专利>
Automatic training of a database intrusion detection system
Automatic training of a database intrusion detection system
展开▼
机译:自动训练数据库入侵检测系统
展开▼
页面导航
摘要
著录项
相似文献
摘要
A database intrusion detection system (DIDS) automatically trains itself to account for changes to the database. The DIDS monitors upstream queries sent to the database and downstream data provided in response to the queries. The DIDS classifies an upstream query as legitimate or anomalous. If the query is anomalous, the DIDS determines whether the anomaly resulted from a change in the database by performing one or more tests. One test determines whether the query references new fields or tables. Another test determines the frequency at which the query is received, and/or whether the query is received from multiple sources. A third test determines whether the query accesses sensitive information. Together, the results of these tests describe whether the query should be classified as anomalous or legitimate.
展开▼