4 ms·
I worked at a company that logged every single SQL query and made a rule set based on that. May not of been the most efficient but it worked great. There was ba
by nerdbaggy 7y ago
I worked at a company that logged every single SQL query and made a rule set based on that. May not of been the most efficient but it worked great. There was basically a whitelist of sorts and if the query structure wasn’t in there then action taken. Also worked by knowing what queries came in what order when doing certain things.
- xfitm3 7y agoWhat tooling did you use to audit queries?
- dboreham 7y agoNot parent but it reads like they wrote their own (presumably driven by DB server log data with query logging enabled).
- INTPenis 7y agoThis sounds a lot like an IDS for SQL. I've worked with government agencies that focus very heavily on IDS in firewall systems. SO not only do they catch attacks early, in the perimiter network, but they also often block legitimate traffic and handle such cases regularly. But it's a default deny policy so that comes with. It also costs a ton of money for the best IDS solutions. I believe it comes from companies like Checkpoint, Cisco and Symantec.