Patent ID: 11888871
Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATION
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. A method of protecting a cloud database located at a database server and accessible from a database client, wherein the database client communicates with the database server over a database protocol, comprising:
receiving a communication associated with a database session, the database session being directed to the database server;
following receipt of the communication, switching from a first operating mode to a second operating mode;
evaluating whether a hostname or network address associated with the communication is located in or derivable from data in a database protocol packet, the database protocol packet associated with the database session; and
when the hostname or network address associated with the database session is not located in or derivable from the data in the database protocol packet, identifying the database session as being potentially associated with a man-in-the-middle instead of the database client;
wherein the first operating mode is a transparent gateway operating mode, and wherein the second operating mode is a proxy operating mode.