Patent ID: 11888871
Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATION
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 12:
13. A computer program product in a non-transitory computer readable medium for use in a data processing system, the data processing system configured to protect a cloud database located at a database server and accessible from a database client, and wherein the database client communicates with the database server over a database protocol, the computer program product holding computer program instructions that, when executed by the data processing system, are configured to:
receive a communication associated with a database session, the database session being directed to the database server;
following receipt of the communication, switch from a first operating mode to a second operating mode;
evaluate whether a hostname or network address associated with the communication is located in or derivable from data in a database protocol packet, the database protocol packet associated with the database session; and
when the hostname or network address associated with the database session is not located in or derivable from the data in the database protocol packet, identify the database session as being potentially associated with a man-in-the-middle instead of the database client;
wherein the first operating mode is a transparent gateway operating mode, and wherein the second operating mode is a proxy operating mode.