Patent ID: 8799320
Filing Date: 2014-08-05
Classification: G06F,H04L

Abstract:
1. A computer program product, comprising a non-transitory computer usable medium having a computer readable program code embodied therein, the computer readable program code adapted to be executed to implement a method, the method comprising: storing data for each of multiple tenants in at least one database of a database system having hardware and software that is shared by the multiple tenants, wherein the data stored for each of the multiple tenants is located in a logically separate partition of the at least one database; providing users of each of the multiple tenants access to the database system including: providing each of the multiple tenants network access to the at least one database by: providing a query plan detection module as a component separate from the at least one database, wherein the query plan detector module executes a process that runs independently of the at least one database; polling the database system for query plans of users of the multiple tenants by the query plan detection module, wherein the query plans each include a set of steps used to access at least a portion of the data in the at least one database of the database system; analyzing the query plans of the users of the multiple tenants by the query plan detection module; determining by the query plan detection module whether at least one of the query plans of the users of the multiple tenants is suspect, including: in response to determining that at least one of the query plans of the users of the multiple tenants is suspect, logging information associated with the suspect at least one query plan, the information indicating the query plan and an identifier of the user; wherein, for each of the requests to access the data received from the users of the tenants, the one or more firewall servers: