SQL Statement Security Evaluation via Association Rules
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security measures cannot effectively evaluate the potential risk of multiple Structured Query Language (SQL) statements combined in a session, which can pose serious security hazards to database systems, despite individual SQL statements being low-risk.
Innovation Solution
A method and apparatus that evaluate the criticality of multiple SQL statements in sessions, generate a critical item set, extract association rules, calculate criticality, rank these rules, and specify security policies to process future sessions based on historical data, thereby predicting and mitigating security risks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple SQL statements are combined in a session to meet complex query demands, then the query capability is improved, but the security risk increases
Solution Approach 1:
The system performs preliminary security evaluation on individual SQL statements before they are executed in combination. By pre-assessing each statement's security characteristics and storing them in a database, the system can predict potential risks of combined statements before actual execution, enabling proactive security intervention rather than reactive response
Solution Approach 2:
The system establishes a feedback mechanism where security evaluation results of individual SQL statements are stored and reused when evaluating combined statements. The security evaluation module queries historical evaluation data and combines it with current session context to provide continuous security assessment, creating a closed-loop security monitoring system
2Device complexity
If existing security measures evaluate only individual SQL statements, then the evaluation process is simple, but the security assessment is insufficient
Solution Approach 1:
The system merges individual SQL statement security evaluations with session-level context analysis. By combining the security characteristics of multiple individual statements with the session's overall behavior pattern, the system achieves comprehensive security assessment that is more accurate than evaluating statements in isolation
Solution Approach 2:
The system transitions from one-dimensional individual statement evaluation to multi-dimensional combined statement evaluation. It incorporates additional dimensions such as session context, statement sequences, and historical security data, transforming the security assessment from a simple binary check to a comprehensive multi-factor analysis
Data Source
AI summary
Techniques are provided for evaluating the security of data access statements. Specifically, in one embodiment of the claimed subject matter there is provided a technique for evaluating the security of data access statements, comprising: evaluating the criticality of multiple SQL statements contained in multiple sessions accessing a database; generating a critical item set from the multiple sessions, each element in the critical item set indicating one or more SQL statements contained in a session; extracting at least one association rule from the critical item set, each of the at least association rule indicating a sequence of SQL statements contained in a session; and calculating the criticality of each of the at least one association rule.