1. A method to perform disclosure-based database auditing, said method comprising: formulating one or more audit expressions specifying sensitive data to be subjected to an audit; identifying a subset of logged queries which accessed said sensitive data with respect to said one or more audit expressions; formulating an audit query by combining and transforming said subset of logged queries, and running said audit query against a database to identify suspicious queries that accessed said sensitive data.