Security Guardrails & Hardening — OQENS Cloud Docs
SQL statement filtering, execution timeouts, role isolation, and encryption.
OQENS enforces multi-layer defense mechanisms across SQL parsing, network ingress, and database process boundaries.
Blocked SQL Operations
The SQL gateway parses and rejects dangerous operations prior to execution:
| Blocked Command / Function | Risk Mitigated |
|---|---|
DROP DATABASE |
Accidental or malicious database destruction |
ALTER SYSTEM |
Server configuration modification |
COPY ... TO/FROM PROGRAM |
Arbitrary host OS command execution |
PG_READ_FILE, PG_WRITE_FILE |
Local file system exploration or tamper |
PG_EXECUTE_SERVER_PROGRAM |
Privilege escalation |
Execution Limits & Cutoffs
- Hard Query Timeout: 15,000ms (15 seconds). Long-running statements are killed via
statement_timeout. - Max Unconstrained Limit: 500 rows if no
LIMITclause is present. - Max Table Page Size: 200 rows per request.
Encryption & TLS Standards
- Transport Layer: TLS 1.3 encryption with ECDHE key exchange and HSTS headers.
- Password Storage: PBKDF2-SHA256 with cryptographically random per-user salts (100,000 iterations).