1. A computer-based method to perform disclosure-based database auditing, said method comprising: formulating one or more audit expressions declaratively specifying sensitive data to be subjected to an audit; performing a static analysis of said one or more audit expressions and identifying a subset of logged queries which accessed said sensitive data with respect to said one or more audit expressions; formulating a single audit query by combining and transforming said subset of logged queries by augmenting one or more predicates derived from said one or more audit expressions; running said audit query against a database to identify suspicious queries that accessed said sensitive data, and outputting said identified queries that accessed said sensitive data.