How does database protection compare with virus detection?
Virus detectors scan a computer’s disk and memory looking for patterns that correspond to known viruses (and other malware). This approach is effective when there are small numbers of viruses that are widely distributed, so each threatens a large number of computers. But if attacks on critical data are specific to the each database, and since the SQL language allows an infinite number of different queries, the number of ways of making a given attack can also be infinite. So there are as many database attacks as there are databases, or programs that use them. The string-based approaches used by virus detectors cannot defend databases. Secerno.SQL defends against these attacks since it can understand the full intent of a database query and classify it against a definition of acceptable behaviour.
