Patent ID: 8701191

Claim:
A method for controlling data access in a database, the method comprising: receiving a request for data at an application layer of a database, the database comprising the application layer, a table layer, and a file layer, and the requested data residing in one or more data files stored at the file layer; responsive to the received data request, performing, by a processing system, a first intrusion detection analysis at the application layer to determine whether the received data request comprises an application layer intrusion; responsive to a determination that the received data request does not comprise an application layer intrusion, performing, by the processing system, a second intrusion detection analysis at the table layer to determine whether the received data request comprises a table layer intrusion; responsive to a determination that the received data request does not comprise a table layer intrusion, performing, by the processing system, a third intrusion detection analysis at the file layer to determine whether the received data request comprises a file layer intrusion; and granting access to the requested data in response to a determination that the received data request does not comprise a file layer intrusion.