1. An apparatus for evaluating data access statements with respect to database security and protecting, an automated database, comprising: a plurality of processors; a non-transitory computer readable storage medium (CRSM) coupled to the plurality of processors; and computer code, stored on the CRSM and executed on the plurality of processors, the code comprising for: evaluating a criticality of two or more SQL statements, each statement from a different session of two or more sessions accessing a database, from a first computing system, a database implemented on a data server; generating, on the data server, a critical item set based upon the evaluated criticality of the two or more SQL statements from the two or more sessions, each element in the critical item set indicating one or more SQL statements contained in a session of the two or more sessions, extracting at least one association rule from the critical item set, each of the at least one association rule indicating a sequence of SQL statements; calculating criticality of each of the at least one association rule; evaluating a session based upon a criticality of at least one association rule; terminating, by the data server, the session based upon a result of the evaluating; ranking, by the data server, at least two association rules by the criticality of each of the at least two association rules; and specifying, by the data server, a security policy corresponding to each of the at least two association rules according to the ranking.