The latest generation of security software studies the way people normally access a database to identify hackers. It learns about appropriate database usage patterns, and sounds an alarm if something anomalous happens.