Follow Us

We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message

UK startup locks up SQL in "micro-perimeter"

Launches new type of database firewall.

Article comments

This week’s Infosecurity Show saw the re-emergence of a phenomenon so rare it is hard to recollect when it last got serious coverage in the UK – the security startup.

Heading what is still a very short list was an Oxford outfit, Secerno, which used the opportunity to sift show-going CTOs and CFOs for interest in its database protection application, Secerno.SQL.

Founded in 2003, and backed by venture investors such as Eden ventures and Quester, the company has worked its technology into a functional alpha product, due for official launch later this year.

The technology is described as using custom algorithms to analyse the normal use of a database through the SQL commands sent to it, so that unusual ones can be detected and blocked.

Because the list of possible legitimate commands for an SQL database is vast, the system is trained to protect each company’s specific use of that application. In real-world examples, databases use only a subset of any possible command list, making it easier to erect a “micro-perimeter” around the software.

“Application-specific protocol level IDS (intrusion detection systems) are definitely the way forward. By putting the protection right up close to the application it needs to safeguard, Secerno’s approach addresses one of the key principles of de-perimeterisation,” commented Paul Simmonds, a member of the influential Jericho Forum.

According to co-founder and CEO Paul Davie, the company has been currently putting Secerno.SQL through third-party intrusion testing, and plans to continue working with half a dozen partners to further refine the user interface.

“The technology can secure XML, http, and SOAP. We are choosing SQL for commercial reasons,” he said. Future releases would expand this protocol independence.

Secerno has named one of its test partners as the online selling outfit,


More from Techworld

More relevant IT news


Send to a friend

Email this article to a friend or colleague:

PLEASE NOTE: Your name is used only to let the recipient know who sent the story, and in case of transmission error. Both your name and the recipient's name and address will not be used for any other purpose.

Techworld White Papers

Choose – and Choose Wisely – the Right MSP for Your SMB

End users need a technology partner that provides transparency, enables productivity, delivers...

Download Whitepaper

10 Effective Habits of Indispensable IT Departments

It’s no secret that responsibilities are growing while budgets continue to shrink. Download this...

Download Whitepaper

Gartner Magic Quadrant for Enterprise Information Archiving

Enterprise information archiving is contributing to organisational needs for e-discovery and...

Download Whitepaper

Advancing the state of virtualised backups

Dell Software’s vRanger is a veteran of the virtualisation specific backup market. It was the...

Download Whitepaper

Techworld UK - Technology - Business

Innovation, productivity, agility and profit

Watch this on demand webinar which explores IT innovation, managed print services and business agility.

Techworld Mobile Site

Access Techworld's content on the move

Get the latest news, product reviews and downloads on your mobile device with Techworld's mobile site.

Find out more...

From Wow to How : Making mobile and cloud work for you

On demand Biztech Briefing - Learn how to effectively deliver mobile work styles and cloud services together.

Watch now...

Site Map

* *