acra-poisonrecordmaker

Overview ¶

Package main is entry point for AcraPoisonRecordsMaker utility. AcraPoisonRecordsMaker generates poison record with desired length and outputs it to console. Poison records are the records specifically designed and crafted in such a way that they wouldn't be queried by a user under normal circumstances. Yet poison records will be included in the outputs of SELECT * requests. Upon passing AcraServer, they will inform it of untypical behaviour. The goal of using poison records is simple — to detect adversaries trying to download full tables / full database from the application server or trying to run full scans in their injected queries.

https://github.com/cossacklabs/acra/wiki/Intrusion-detection