WO2003073332A3 - Method and apparatus for monitoring a database system - Google Patents

Method and apparatus for monitoring a database system Download PDF

Info

Publication number
WO2003073332A3
WO2003073332A3 PCT/US2003/005673 US0305673W WO03073332A3 WO 2003073332 A3 WO2003073332 A3 WO 2003073332A3 US 0305673 W US0305673 W US 0305673W WO 03073332 A3 WO03073332 A3 WO 03073332A3
Authority
WO
WIPO (PCT)
Prior art keywords
database system
monitoring
data
data elements
potentially anomalous
Prior art date
Application number
PCT/US2003/005673
Other languages
French (fr)
Other versions
WO2003073332A2 (en
Inventor
Akio Sakamoto
Amarnath Mukhjerjee
Frank Sudia
Seshan Raj
Original Assignee
Iplocks Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Iplocks Inc filed Critical Iplocks Inc
Priority to IL16364703A priority Critical patent/IL163647A0/en
Priority to EP03716168A priority patent/EP1476827A2/en
Priority to JP2003571954A priority patent/JP2005526311A/en
Priority to AU2003219885A priority patent/AU2003219885B2/en
Priority to KR1020047013028A priority patent/KR100732789B1/en
Priority to CA002476865A priority patent/CA2476865A1/en
Publication of WO2003073332A2 publication Critical patent/WO2003073332A2/en
Publication of WO2003073332A3 publication Critical patent/WO2003073332A3/en

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
    • G06F16/23—Updating
    • G06F16/2365—Ensuring data consistency and integrity
    • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y10—TECHNICAL SUBJECTS COVERED BY FORMER USPC
    • Y10S—TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y10S707/00—Data processing: database and file management or data structures
    • Y10S707/99931—Database or file accessing
    • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y10—TECHNICAL SUBJECTS COVERED BY FORMER USPC
    • Y10S—TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y10S707/00—Data processing: database and file management or data structures
    • Y10S707/99931—Database or file accessing
    • Y10S707/99939—Privileged access

Abstract

Techniques are provided for monitoring a database system. A set of data elements may be read from a database system into a device. The device may be external to the database system. From the device, a set of analysis operations are performed on the data elements in order to identify if any of the date elements satisfy a criteria for being considered potentially anomalous. A notification is signaled if potentially anomalous data is identified.
PCT/US2003/005673 2002-02-22 2003-02-24 Method and apparatus for monitoring a database system WO2003073332A2 (en)

Priority Applications (6)

Application Number Priority Date Filing Date Title
IL16364703A IL163647A0 (en) 2002-02-22 2003-02-24 Method and apparatus for monitoring database system
EP03716168A EP1476827A2 (en) 2002-02-22 2003-02-24 Method and apparatus for monitoring a database system
JP2003571954A JP2005526311A (en) 2002-02-22 2003-02-24 Method and apparatus for monitoring a database system
AU2003219885A AU2003219885B2 (en) 2002-02-22 2003-02-24 Method and apparatus for monitoring a database system
KR1020047013028A KR100732789B1 (en) 2002-02-22 2003-02-24 Method and apparatus for monitoring a database system
CA002476865A CA2476865A1 (en) 2002-02-22 2003-02-24 Method and apparatus for monitoring a database system

Applications Claiming Priority (4)

Application Number Priority Date Filing Date Title
US35941202P 2002-02-22 2002-02-22
US60/359,412 2002-02-22
US37860402P 2002-05-06 2002-05-06
US60/378,604 2002-05-06

Publications (2)

Publication Number Publication Date
WO2003073332A2 WO2003073332A2 (en) 2003-09-04
WO2003073332A3 true WO2003073332A3 (en) 2004-03-11

Family

ID=27767571

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/US2003/005673 WO2003073332A2 (en) 2002-02-22 2003-02-24 Method and apparatus for monitoring a database system

Country Status (9)

Country Link
US (1) US7085780B2 (en)
EP (1) EP1476827A2 (en)
JP (1) JP2005526311A (en)
KR (1) KR100732789B1 (en)
CN (1) CN1643520A (en)
AU (1) AU2003219885B2 (en)
CA (1) CA2476865A1 (en)
IL (1) IL163647A0 (en)
WO (1) WO2003073332A2 (en)

Families Citing this family (53)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR20070101408A (en) * 1999-09-02 2007-10-16 이비덴 가부시키가이샤 Printed circuit board and method for manufacturing printed circuit board
US20020069367A1 (en) * 2000-12-06 2002-06-06 Glen Tindal Network operating system data directory
US8219662B2 (en) * 2000-12-06 2012-07-10 International Business Machines Corporation Redirecting data generated by network devices
US6978301B2 (en) 2000-12-06 2005-12-20 Intelliden System and method for configuring a network device
US7054946B2 (en) * 2000-12-06 2006-05-30 Intelliden Dynamic configuration of network devices to enable data transfers
US7249170B2 (en) * 2000-12-06 2007-07-24 Intelliden System and method for configuration, management and monitoring of network resources
US7150037B2 (en) * 2001-03-21 2006-12-12 Intelliden, Inc. Network configuration manager
US8296400B2 (en) * 2001-08-29 2012-10-23 International Business Machines Corporation System and method for generating a configuration schema
US7065562B2 (en) * 2001-11-26 2006-06-20 Intelliden, Inc. System and method for generating a representation of a configuration schema
US7464145B2 (en) * 2002-07-11 2008-12-09 Intelliden, Inc. Repository-independent system and method for asset management and reconciliation
US20040028069A1 (en) * 2002-08-07 2004-02-12 Tindal Glen D. Event bus with passive queuing and active routing
US20040030771A1 (en) * 2002-08-07 2004-02-12 John Strassner System and method for enabling directory-enabled networking
US20040078457A1 (en) * 2002-10-21 2004-04-22 Tindal Glen D. System and method for managing network-device configurations
US20040230681A1 (en) * 2002-12-06 2004-11-18 John Strassner Apparatus and method for implementing network resources to provision a service using an information model
WO2004093384A1 (en) * 2003-04-04 2004-10-28 Computer Associates Think, Inc. Method and system for discovery of remote agents
US7406714B1 (en) 2003-07-01 2008-07-29 Symantec Corporation Computer code intrusion detection system based on acceptable retrievals
US7568229B1 (en) 2003-07-01 2009-07-28 Symantec Corporation Real-time training for a computer code intrusion detection system
CA2545916C (en) * 2003-11-12 2015-03-17 The Trustees Of Columbia University In The City Of New York Apparatus method and medium for detecting payload anomaly using n-gram distribution of normal data
US7350922B2 (en) * 2004-02-13 2008-04-01 Angstrom, Inc. Three-dimensional display using variable focal length micromirror array lens
US7382516B2 (en) * 2004-06-18 2008-06-03 Angstrom, Inc. Discretely controlled micromirror with multi-level positions
US20050203881A1 (en) * 2004-03-09 2005-09-15 Akio Sakamoto Database user behavior monitor system and method
US8266177B1 (en) 2004-03-16 2012-09-11 Symantec Corporation Empirical database access adjustment
US7246223B2 (en) * 2004-03-23 2007-07-17 Kabushiki Kaisha Toshiba System and method for monitoring configuration changes in a document processing device
US7401085B2 (en) * 2004-04-14 2008-07-15 Blackrock, Inc. System and method for controlling the release of updates to a database configuration
US7631296B2 (en) * 2004-04-30 2009-12-08 Microsoft Corporation Rules framework for definition and execution of end-user rules logic
US7665133B2 (en) * 2004-06-12 2010-02-16 Toshbia Tec Kabushiki Kaisha System and method for monitoring processing in a document processing peripheral
US7874000B1 (en) * 2004-11-22 2011-01-18 Symantec Corporation Reducing false positives generated by a database intrusion detection system
US7444331B1 (en) 2005-03-02 2008-10-28 Symantec Corporation Detecting code injection attacks against databases
WO2006116395A2 (en) * 2005-04-26 2006-11-02 Rdr Technologies, Llc System for data archiving and system behavior prediction
US8046374B1 (en) * 2005-05-06 2011-10-25 Symantec Corporation Automatic training of a database intrusion detection system
US7558796B1 (en) 2005-05-19 2009-07-07 Symantec Corporation Determining origins of queries for a database intrusion detection system
US7774361B1 (en) 2005-07-08 2010-08-10 Symantec Corporation Effective aggregation and presentation of database intrusion incidents
US7690037B1 (en) * 2005-07-13 2010-03-30 Symantec Corporation Filtering training data for machine learning
US7543003B2 (en) * 2005-08-25 2009-06-02 Microsoft Corporation Providing change notifications to an entity-regarding a change of a specific type to data in a relational database
WO2007096890A2 (en) * 2006-02-27 2007-08-30 Sentrigo Inc. Device, system and method of database security
US8056141B2 (en) 2006-09-13 2011-11-08 Imperva, Inc. Method for monitoring stored procedures
US8091127B2 (en) 2006-12-11 2012-01-03 International Business Machines Corporation Heuristic malware detection
US20080178278A1 (en) * 2007-01-22 2008-07-24 Doron Grinstein Providing A Generic Gateway For Accessing Protected Resources
US20080282346A1 (en) * 2007-05-10 2008-11-13 Motorola, Inc. Data Type Management Unit
US9529820B2 (en) * 2008-05-23 2016-12-27 International Business Machines Corporation Automated content tracking and conversion
KR101022643B1 (en) * 2008-11-20 2011-03-22 서울대학교산학협력단 Apparatus and method for managing e-catalogs
US8868607B2 (en) * 2009-09-18 2014-10-21 American International Group, Inc. Privileged user access monitoring in a computing environment
US8738569B1 (en) * 2012-02-10 2014-05-27 Emc Corporation Systematic verification of database metadata upgrade
US10122747B2 (en) 2013-12-06 2018-11-06 Lookout, Inc. Response generation after distributed monitoring and evaluation of multiple devices
CN104077371B (en) * 2014-06-24 2019-03-29 用友优普信息技术有限公司 The method and system of monitor database abnormal data
US10621197B2 (en) * 2015-10-30 2020-04-14 Intuit Inc. Managing synchronization issues between profile stores and sources of truth
EP3255548A1 (en) * 2016-06-09 2017-12-13 Mastercard International Incorporated Method and systems for monitoring changes for a server system
US10990677B2 (en) * 2017-06-05 2021-04-27 Microsoft Technology Licensing, Llc Adversarial quantum machine learning
CN107368975A (en) * 2017-07-21 2017-11-21 上海携程商务有限公司 Data checking method, system, storage medium and electronic equipment
CN110489971A (en) * 2018-05-15 2019-11-22 微软技术许可有限责任公司 The data set management of safety
US11593505B2 (en) * 2018-09-20 2023-02-28 Idera, Inc. Database access, monitoring, and control system and method for reacting to suspicious database activities
US11361076B2 (en) * 2018-10-26 2022-06-14 ThreatWatch Inc. Vulnerability-detection crawler
CN110609780B (en) * 2019-08-27 2023-06-13 Oppo广东移动通信有限公司 Data monitoring method and device, electronic equipment and storage medium

Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6041327A (en) * 1997-12-12 2000-03-21 Telefonaktiebolaget Lm Ericsson Implementation of notification capabilities in relational databases

Family Cites Families (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5878420A (en) * 1995-08-31 1999-03-02 Compuware Corporation Network monitoring and management system
JP3935986B2 (en) * 1995-12-26 2007-06-27 富士通株式会社 Network information resource monitoring system for notifying changes in information resources in a network
US6122633A (en) * 1997-05-27 2000-09-19 International Business Machines Corporation Subscription within workflow management systems
JP2000148276A (en) 1998-11-05 2000-05-26 Fujitsu Ltd Device and method for monitoring security and securithy monitoring program recording medium
US6282570B1 (en) * 1998-12-07 2001-08-28 International Business Machines Corporation Monitoring a large parallel database through dynamic grouping and sequential sampling
US6597777B1 (en) * 1999-06-29 2003-07-22 Lucent Technologies Inc. Method and apparatus for detecting service anomalies in transaction-oriented networks
US6473760B1 (en) * 1999-12-13 2002-10-29 Imagex, Inc. Apparatus for printing information automatically combined from two different sources
US6697810B2 (en) * 2001-04-19 2004-02-24 Vigilance, Inc. Security system for event monitoring, detection and notification system
EP1315065B1 (en) 2001-11-23 2007-10-10 Protegrity Research & Development Method for intrusion detection in a database system
US20050203881A1 (en) 2004-03-09 2005-09-15 Akio Sakamoto Database user behavior monitor system and method

Patent Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6041327A (en) * 1997-12-12 2000-03-21 Telefonaktiebolaget Lm Ericsson Implementation of notification capabilities in relational databases

Non-Patent Citations (5)

* Cited by examiner, † Cited by third party
Title
BIERMANN E ET AL: "A comparison of Intrusion Detection systems", COMPUTERS & SECURITY. INTERNATIONAL JOURNAL DEVOTED TO THE STUDY OF TECHNICAL AND FINANCIAL ASPECTS OF COMPUTER SECURITY, ELSEVIER SCIENCE PUBLISHERS. AMSTERDAM, NL, vol. 20, no. 8, 1 December 2001 (2001-12-01), pages 676 - 683, XP004329578, ISSN: 0167-4048 *
CHUNG C Y ET AL: "DEMIDS: a misuse detection system for database systems", INTEGRITY AND INTERNAL CONTROL IN INFORMATION SYSTEMS: STRATEGIC VIEWS ON THE NEED FOR CONTROL. IFIP TC11 WG11.5 THIRD WORKING CONFERENCE, PROCEEDINGS OF 3RD INTERNATIONAL WORKING CONFERENCE ON INTEGRITY AND INTERNAL CONTROL IN INFORMATION SYSTEMS, A, 2000, Norwell, MA, USA, Kluwer Academic Publishers, USA, pages 1 - 21, XP002262247, ISBN: 0-7923-7821-0 *
LIN J-L ET AL: "ABSTRACTION-BASED MISUSE DETECTION: HIGH-LEVEL SPECIFICATIONS AND ADAPTABLE STRATEGIES", PROCEEDINGS. THE IEEE COMPUTER SECURITY FOUNDATIONS WORKSHOP, June 1998 (1998-06-01), pages 190 - 201, XP002938218 *
MCAULIFFE N ET AL: "Is your computer being misused? A survey of current intrusion detection system technology", COMPUTER SECURITY APPLICATIONS CONFERENCE, 1990., PROCEEDINGS OF THE SIXTH ANNUAL TUCSON, AZ, USA 3-7 DEC. 1990, LOS ALAMITOS, CA, USA,IEEE COMPUT. SOC, US, 3 December 1990 (1990-12-03), pages 260 - 272, XP010021644, ISBN: 0-8186-2105-2 *
TURKER C ET AL: "Semantic integrity support in SQL:1999 and commercial (object-)relational database management systems", VLDB JOURNAL, DEC. 2001, SPRINGER-VERLAG, GERMANY, vol. 10, no. 4, pages 241 - 269, XP002262248, ISSN: 1066-8888 *

Also Published As

Publication number Publication date
US20040024736A1 (en) 2004-02-05
CA2476865A1 (en) 2003-09-04
EP1476827A2 (en) 2004-11-17
AU2003219885B2 (en) 2007-06-14
KR100732789B1 (en) 2007-06-27
JP2005526311A (en) 2005-09-02
KR20040088510A (en) 2004-10-16
US7085780B2 (en) 2006-08-01
AU2003219885A1 (en) 2003-09-09
CN1643520A (en) 2005-07-20
WO2003073332A2 (en) 2003-09-04
IL163647A0 (en) 2005-12-18

Similar Documents

Publication Publication Date Title
WO2003073332A3 (en) Method and apparatus for monitoring a database system
TWI265410B (en) System and method for real-time fault detection, classification, and correction in a semiconductor manufacturing environment
HK1061449A1 (en) Content-based storage management
WO2004070558A3 (en) Method and apparatus to identify a work received by a processing system
AU2002329039A1 (en) System and method for territory thermal monitoring
WO2004102320A3 (en) System and method for determining worker productivity
CA2487999A1 (en) Behavior-based adaptation of computer systems
EP1549055A4 (en) Data processing device, data processing method, computer program, and data processing system
EP1505765A4 (en) Data processing system, data processing device, data processing method, and computer program
EP1818972A4 (en) Device processing system, information display method, program, and recording medium
EP1571835A4 (en) Information processing device and information processing method, information processing system, recording medium, and program
AU2003254886A1 (en) Data measuring device, healthcare data acquiring system, and healthcare data acquiring method
AU2003270921A1 (en) System and method for disabling and providing a notification for a data processing device
AU2003215072A8 (en) System and method for automated biometric data collection
EP1571836A4 (en) Information processing device and information processing method, recording medium, and computer program
EP1505518A4 (en) Information management system, information processing device, information processing method, information processing program, and recording medium
CA2333381A1 (en) Data processing system and method for organizing, analyzing, recording, storing and reporting research results
AU2003258019A1 (en) System and method for indexing non-textual data
WO2007005440A3 (en) Change event correlation
AU2003280003A1 (en) System and method for capture, storage and processing of receipts and related data
EP1496642A4 (en) Information processing device and method, information providing device and method, use right management device and method, recording medium, and program
AU2003234777A1 (en) Information processing system and method, information processing device and method, recording medium, and program
EP1538529A4 (en) Information recording medium, information processing device, information processing method, and computer program
WO2004056069A3 (en) Content management system
GB2405237B (en) A method and system for archiving and restoring data from an operations center in a utility data center

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A2

Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BY BZ CA CH CN CO CR CU CZ DE DK DM DZ EC EE ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NO NZ OM PH PL PT RO RU SC SD SE SG SK SL TJ TM TN TR TT TZ UA UG UZ VC VN YU ZA ZM ZW

AL Designated countries for regional patents

Kind code of ref document: A2

Designated state(s): GH GM KE LS MW MZ SD SL SZ TZ UG ZM ZW AM AZ BY KG KZ MD RU TJ TM AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IT LU MC NL PT SE SI SK TR BF BJ CF CG CI CM GA GN GQ GW ML MR NE SN TD TG

121 Ep: the epo has been informed by wipo that ep was designated in this application
DFPE Request for preliminary examination filed prior to expiration of 19th month from priority date (pct application filed before 20040101)
WWE Wipo information: entry into national phase

Ref document number: 2476865

Country of ref document: CA

WWE Wipo information: entry into national phase

Ref document number: 163647

Country of ref document: IL

WWE Wipo information: entry into national phase

Ref document number: 1020047013028

Country of ref document: KR

Ref document number: 2003571954

Country of ref document: JP

WWE Wipo information: entry into national phase

Ref document number: 2003716168

Country of ref document: EP

WWE Wipo information: entry into national phase

Ref document number: 2003219885

Country of ref document: AU

WWE Wipo information: entry into national phase

Ref document number: 20038064383

Country of ref document: CN

WWP Wipo information: published in national office

Ref document number: 1020047013028

Country of ref document: KR

WWP Wipo information: published in national office

Ref document number: 2003716168

Country of ref document: EP

WWG Wipo information: grant in national office

Ref document number: 2003219885

Country of ref document: AU