Abschwächung von Einschleusungssicherheitsangriffen gegen Nichtrelationale Datenbanken

Details

Veröffentlichungs-Nr.

EP3518134

Aktenzeichen

EP19152292

Anmeldetag

17. Januar 2019

Veröffentlichung

5. August 2020

Erteilung

5. August 2020

Rechtsraum

EP

IPC

G06F21/55

Abstract

For mitigation of injection security attacks against non-relational databases, a database driver layer is integrated with a security layer. A trigger associated with the security layer is set to implement a learning phase of the security layer. In response to enabling the trigger, queries and query parameters associated with the respective queries are received. For the queries, a previously-stored security pattern is identified based on the query and the associated query parameters. The trigger associated with the security layer is reset to implement an execution of the security patterns. In response to resetting the trigger, an additional query and additional query parameters associated with the additional query is received. A particular security pattern is identified that is associated with the additional query and the additional query parameters. At least one of the additional query parameters is determined to not match a corresponding query parameter of the particular security pattern.

Anmelder

Firma

SAP SE

Land

🇩🇪 Deutschland

Fachgebiete