Protecting databases from schema disclosure: a CRUD-based protection model

Database schemas, in many organizations, are considered one of the critical assets to be protected. From database schemas, it is not only possible to infer the information being collected but also the way organizations manage their businesses and/or activities. One of the ways to disclose database schemas is through the Create, Read, Update and Delete (CRUD) expressions. In fact, their use can follow strict security rules or be unregulated by malicious users. In the first case, users are required to master database schemas. This can be critical when applications that access the database directly, which we call database interface applications (DIA), are developed by third party organizations via outsourcing. In the second case, users can disclose partially or totally database schemas following malicious algorithms based on CRUD expressions. To overcome this vulnerability, we propose a new technique where CRUD expressions cannot be directly manipulated by DIAs any more. Whenever a DIA starts-up, the associated database server generates a random codified token for each CRUD expression and sends it to the DIA that the database servers can use to execute the correspondent CRUD expression. In order to validate our proposal, we present a conceptual architectural model and a proof of concept.

An extreme planetary system around HD 219828: one long-period super Jupiter to a hot-Neptune host star

Context. With about 2000 extrasolar planets confirmed, the results show that planetary systems have a whole range of unexpected properties. This wide diversity provides fundamental clues to the processes of planet formation and evolution. Aims: We present a full investigation of the HD 219828 system, a bright metal-rich star for which a hot Neptune has previously been detected. Methods: We used a set of HARPS, SOPHIE, and ELODIE radial velocities to search for the existence of orbiting companions to HD 219828. The spectra were used to characterise the star and its chemical abundances, as well as to check for spurious, activity induced signals. A dynamical analysis is also performed to study the stability of the system and to constrain the orbital parameters and planet masses. Results: We announce the discovery of a long period (P = 13.1 yr) massive (m sini = 15.1 MJup) companion (HD 219828 c) in a very eccentric orbit (e = 0.81). The same data confirms the existence of a hot Neptune, HD 219828 b, with a minimum mass of 21 M⊕ and a period of 3.83 days. The dynamical analysis shows that the system is stable, and that the equilibrium eccentricity of planet b is close to zero. Conclusions: The HD 219828 system is extreme and unique in several aspects. First, ammong all known exoplanet systems it presents an unusually high mass ratio. We also show that systems like HD 219828, with a hot Neptune and a long-period massive companion are more frequent than similar systems with a hot Jupiter instead. This suggests that the formation of hot Neptunes follows a different path than the formation of their hot jovian counterparts. The high mass, long period, and eccentricity of HD 219828 c also make it a good target for Gaia astrometry as well as a potential target for atmospheric characterisation, using direct imaging or high-resolution spectroscopy. Astrometric observations will allow us to derive its real mass and orbital configuration. If a transit of HD 219828 b is detected, we will be able to fully characterise the system, including the relative orbital inclinations. With a clearly known mass, HD 219828 c may become a benchmark object for the range in between giant planets and brown dwarfs.