The IPS and IDS module provides an intrusion detection and prevention system which is implemented in the following methods:
- SQL Injection detection
- Calculation of each query's risk (Anomaly detection subsystem)
- Detection of table content brute-force attempts
- Detection of SQL tautology (Expressions that always return TRUE)
- Risk Profiles
- Detection of groups of SQL commands considered by the administrator to be of high risk. Each group (Risk Profile) can be assigned to an IPS or IDS policy
- Patterns and User Patterns
- Detection of user-defined signatures as well as user-defined groups of built in SQL commands. Each pattern or group (User Patterns and Pattern Groups) can be assigned to an IPS or IDS policy