A static analysis framework for database applications

Proceedings - International Conference on Data Engineering

Volumn , Issue , 2009, Pages 1403-1414

  Dasgupta, Arjun ^a   Narasayya, Vivek ^b   Syamala, Manoj ^b  

^a UNIVERSITY OF TEXAS AT ARLINGTON   (United States)

^b MICROSOFT RESEARCH   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ADO.NET; APPLICATION DEVELOPMENT; DATA ACCESS; DATA INTEGRITY; DATABASE APPLICATIONS; PERFORMANCE PROBLEMS; PROGRAM ANALYSIS; SECURITY PROBLEMS; SQL INJECTION; SQL QUERY;

SECURITY OF DATA;

EID: 67649639279     PISSN: 10844627     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICDE.2009.98     Document Type: Conference Paper

References (23)

1. A. Aho, R. Sethi, and J. Ullman. Compilers. Principles, Techniques and Tools. Addison Wesley.
2. S. Agrawal, E. Chu, V. Narasayya: Automatic physical design tuning: workload as a sequence. In Proceedings of the ACM SIGMOD 2006.
3. S.Chaudhuri, V.Narasayya, M.Syamala. Bridging the Application and DBMS Profiling Divide for Database Application Developers. In Proceedings of the VLDB 2007.
4. Eclipse. Open Source IDE. http://www.eclipse.org
5. LINQ: .NET Language Integrated Querying. http://msdn.microsoft.com.
6. FxCop: Application for analyzing managed code assemblies. http://msdn.microsoft.com.
7. Phoenix Compiler Framework. http://research.microsoft.com/phoenix/ compiler.aspx.
8. N. Bruno, P. Castro: Towards Declarative Queries on Adaptive Data Structures. ICDE 2008.
9. S. Tata, L. Qiao, G. Lohman: On common tools for databases - The case for a client-based index advisor. SMDB 2008. ICDE Workshops.
10. HP Diagnostics software (formerly Mercury). J2EE Performance, SAP Diagnostics, .NET, ERP/CRM Diagnostics. http://www.mercury.com/us/products/ diagnostics/
11. E. Martin, T. Xie. Understanding software application interfaces via string analysis. International Conference on Software Engineering, 2006.
12. Microsoft Conference Management Service (CMT). http://msrcmt.research. microsoft.com/cmt/
13. Microsoft SearchTogether application. http://research.microsoft.com/ searchtogether/
14. G. Wassermann, Z. Su . Sound and precise analysis of web applications for injection vulnerabilities. ACM SIGPLAN conference on Programming Language Design and Implementation (PLDI), 2007.
15. United Nations VS SQL Injections. http://hackademix.net/2007/08/12/ united-nations-vs-sql-injections/
16. S. Agrawal, S. Chaudhuri, L. Kollar, A. Marathe, V. Narasayya, M. Syamala. Database Tuning Advisor for Microsoft SQL Server 2005. In Proceeding of VLDB 2004.
17. D. Zilio, J. Rao, S. Lightstone, G. Lohman, A. Storm, C. Garcia-Arellano, S. Fadden. DB2 Design Advisor: Integrated Automatic Physical Database Design. In Proceedings of VLDB 2004.
18. B. Dageville, D. Das, K. Dias, K. Yagoub, M. Zait, M. Ziauddin. Automatic SQL Tuning in Oracle 10g. Index tuning. In Proceedings of VLDB 2004.
19. Microsoft Visual Studio. http://msdn.microsoft.com/vstudio.
20. Oracle Application Development Framework. http://www.oracle.com/ technology/products/adf/index.html
21. A. Cheung, S. Madden. Performance Profiling with Endoscope, an Acquisitional Software Monitoring Framework. In Proceedings of VLDB 2008.
22. A. Maule, W. Emmerich, and D.S. Rosenblum. Impact Analysis of Database Schema Changes. In Proceedings of International Conference on Software Engineering (ICSE) 2008.
23. SQL Server Migration Assistant. http://www.microsoft.com/sqlserver/2005/ en/us/migrationoracle.aspx