Patent ID: 7904454

Claim:
A security filter device including a server configured for monitoring an external network connection for database commands to protect database objects from unwanted access comprising: a data packet inspection unit resident on a node other than a database manager receiving the database commands, and coupled to the network connection for inspecting passing data packets to find and carry out an analysis of database operation text within said packet, the data packet inspection unit configured in association with a firewall between an external network and an internal LAN containing the database objects for guarding a respective database, the data packet inspection unit comprising: a packet analysis unit to look for structure associated with database operation text: and a parsing unit, associated with said packet analysis unit to parse said database operation text into underlying statements comprising at least database operation commands and database objects; and an enforcement unit, associated with said data packet inspection unit for applying enforcement rules to said data packet, based at least partly on said analysis, the enforcement unit operable to protect respective database objects, the data packet inspection unit configured to first identify database communication packets from other types of packets, and then to pass database destined access attempts to the enforcement unit for application of the enforcement rules based on the database operation commands and database objects.