Abstract: A proxy apparatus for analyzing database queries in a secure network using a valid-query library that is constructed during an initial period following the deployment of an application. The proxy apparatus receives, in an operational mode, an operational database query from the secure network, generates an identifier for the received operational database query based at least upon a query code of the received operational database query; identifies a source and a destination of the received operation database query and compares the generated identifier, the identified source, and the identified destination to the valid-query library. When the comparing fails to match any entries in the valid-query library, the proxy apparatus terminates the operational database query; and when the comparing step matches an entry in the valid-query library, the proxy apparatus relays the received operational database query based on the destination identification.

Abstract: The present disclosure describes a computer-implemented method that includes: populating a metadata shell database with one or more hash values, wherein: each hash value corresponds to a verified installation of a database system, and the metadata shell database is maintained within a locked-down environment on an enterprise network; and monitoring metadata information of one or more database systems on the enterprise network based on periodically accessing metadata information of one or more database systems; and determining whether a database system on the enterprise network has been compromised based on a hash value of the metadata information of the database system and the one or more hash values from the metadata shell database.

Abstract: The present disclosure describes a computer-implemented method that includes: populating a metadata shell database with one or more hash values, wherein: each hash value corresponds to a verified installation of a database system, and the metadata shell database is maintained within a locked-down environment on an enterprise network; and monitoring metadata information of one or more database systems on the enterprise network based on periodically accessing metadata information of one or more database systems; and determining whether a database system on the enterprise network has been compromised based on a hash value of the metadata information of the database system and the one or more hash values from the metadata shell database.

Abstract: A method and system for performing secure database backups with a globally unique identifier to prevent unauthorized access to or restoration of backup data are provided, wherein a first database management system (DBMS) generates an instance of a database and a corresponding globally unique identifier (GUID) to uniquely identify and secure the database instance. The first DBMS uses a hash function to generate a hash of the GUID, which is then stored in association with the database instance. Encrypted backup sets of the database instance are generated by the first DBMS, wherein the GUID is encrypted and stored in association with each backup set. The first DBMS encodes each encrypted backup set to require that a second or subsequent DBMS possess the identical GUID associated with the database instance before any attempt to access or restore the backup set is permitted.

Abstract: A method and system for performing secure database backups with a globally unique identifier to prevent unauthorized access to or restoration of backup data are provided, wherein a first database management system (DBMS) generates an instance of a database and a corresponding globally unique identifier (GUID) to uniquely identify and secure the database instance. The first DBMS uses a hash function to generate a hash of the GUID, which is then stored in association with the database instance. Encrypted backup sets of the database instance are generated by the first DBMS, wherein the GUID is encrypted and stored in association with each backup set. The first DBMS encodes each encrypted backup set to require that a second or subsequent DBMS possess the identical GUID associated with the database instance before any attempt to access or restore the backup set is permitted.