Microsoft Technology Licensing, LLC

Yoav Y Rubin

Andrey Karpovsky

Tomer Weisberg

Oren Yossef

Ron Matchoro

Ram Bracha

Yoav M Frandzel

Identifying suspicious activity at a database of a multi-database system. A global evaluation of a plurality of interactions associated with a plurality of databases included within the multi-database system may be performed. A local evaluation of a plurality of interactions associated with a particular database of the plurality of databases may also be performed. The plurality of interactions associated with the particular database may comprise a subset of the plurality of interactions associated with the plurality of databases. A combination of both the global evaluation and the local evaluation may be analyzed to thereby identify one or more suspicious activities occurring at the particular database. Based on the analysis of the combination of the global evaluation and the local evaluation, one or more suspicious activities occurring at the particular database may then be identified.

Growing community of inventors

Vancouver, Canada

Yoav Y Rubin