Checking enforcement of integrity constraints in database applications based on code patterns

Journal of Systems and Software

Volumn 84, Issue 12, 2011, Pages 2253-2264

  Zhang, Hongyu ^a,b   Kuan Tan, Hee Beng ^c   Zhang, Lu ^d   Lin, Xi ^a,b   Wang, Xiaoyin ^d   Zhang, Chun ^d   Mei, Hong ^d  

^a Tsinghua University   (China)

^b TSINGHUA NATIONAL LABORATORY FOR INFORMATION SCIENCE AND TECHNOLOGY   (China)

^c NANYANG TECHNOLOGICAL UNIVERSITY   (Singapore)

^d Peking University   (China)

Author keywords

Code patterns; Code quality; Integrity constraint enforcement; PHP; Static analysis

Indexed keywords

APPLICATION LEVEL; AUTOMATIC DETECTION; CODE QUALITY; CODE-PATTERNS; DATABASE APPLICATIONS; DOMAIN CONSTRAINT; EMPIRICAL ANALYSIS; INTEGRITY CONSTRAINT ENFORCEMENT; INTEGRITY CONSTRAINTS; MINING CODES; OPEN-SOURCE; PHP; QUALITY IMPROVEMENT; UNIQUE FEATURES;

DATABASE SYSTEMS; ICE;

STATIC ANALYSIS;

EID: 80053573938     PISSN: 01641212     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.jss.2011.06.044     Document Type: Article

References (33)

1. R. Ramakrishnan, and J. Gehrke Database Management Systems 2nd edition 2000 McGraw-Hill
2. A. Silberschatz, H. Korth, and S. Sudarshan Database System Concepts 2005 McGraw-Hill
3. M. Blaha A retrospective on industrial database reverse engineering projects Proceedings of Working Conference on Reverse Engineering, pp. 136-147 2001
4. FindBugs, 2011. http://findbugs.sourceforge.net, May.
5. D. Hovemeyer, and W. Pugh Finding bugs is easy Proceedings of ACM SIGPLAN Conference on Object-Oriented Programming, Systems, Languages, and Applications (Companion), pp. 132-136 2004
6. PMD, 2011. http://pmd.sourceforge.net/, May.
7. M. Blaha A copper bullet for software quality improvement IEEE Computer 37 2 2004 21 25
8. M. Harrold, B. Malloy, and G. Rothermel Efficient construction of program dependence graphs Proceedings of the International Symposium on Software Testing and Analysis, pp. 160-170 1993
9. T. McCabe A complexity measure IEEE Transactions on Software Engineering 2 4 1976 308 320
10. A. Christensen, A. Møller, and M. Schwartzbach Precise analysis of string expressions Proceedings of the International Static Analysis Symposium, pp. 1-18 2003
11. Y. Minamide Static approximation of dynamically generated web pages Proceedings of International Conference on World Wide Web, pp. 432-441 2005
12. G. Wassermann, and Z. Su Static detection of cross-site scripting vulnerabilities Proceedings of the International Conference on Software Engineering, pp. 171-180 2008
13. N. Jovanovic, C. Kruegel, and E. Kirda Pixy: a static analysis tool for detecting web application vulnerabilities Proceedings of IEEE Symposium on Security and Privacy, pp. 258-263 2006
14. N. Jovanovic, C. Kruegel, and E. Kirda Precise alias analysis for static detection of web application vulnerabilities Proceedings of ACM SIGPLAN Workshop on Programming Languages and Analysis for Security, pp. 27-36 2006
15. Y. Huang, F. Yu, C. Hang, C. Tsai, D. Lee, and S. Kuo Verifying web applications using bounded model checking Proceedings of IEEE/IFIP Conference on Dependable Systems and Networks, pp. 199-208 2004
16. A.V. Aho, R. Sethi, and J.D. Ullman Compilers: Principles, Techniques, and Tools 1986 Addison-Wesley
17. R. Baeza-Yates, and B. Ribeiro-Neto Modern Information Retrieval 1999 Addison-Wesley
18. I. Witten, and E. Frank Data Mining: Practical Machine Learning Tools and Techniques with Java Implementation 2nd edition 2005 Morgan Kaufmann
19. S. Ambler Agile Database Techniques: Effective Strategies for the Agile Software Developer 2003 Wiley
20. Wenfei Fan, Floris Geerts, Xibei Jia, and Anastasios Kementsietsidis Conditional functional dependencies for capturing data inconsistencies ACM Transactions on Database Systems 33 2 2008 10.1145/1366102.1366103 Article 6 (June 2008), 48 pages
21. W. Fan Dependencies revisited for improving data quality Proceedings of the International Symposium on Principles of Database Systems, pp. 159-170 2008
22. S. Song, and L. Chen Discovering matching dependencies Proceedings of the International Conference on Information and Knowledge Managment, pp. 1421-1424 2009
23. S. Jurk, and M. Balaban Improving integrity constraint enforcement by extended rules and dependency graphs Proceedings of International Conference on Database and Expert Systems Appliactions, pp. 501-516 2001
24. A. Dasgupta, V. Narasayya, and M. Syamala A static analysis framework for database applications Proceedings of the International Conference on Data Engineering, pp. 1403-1414 2009
25. A. Maule, W. Emmerich, and D. Rosenblum Impact analysis of database schema changes Proceedings of the International Conference on Software Engineering, pp. 451-460 2008
26. P. Thiran, J. Hainaut, G. Houben, and D. Benslimane Wrapper-based evolution of legacy information systems ACM Transactions on Software Engineering and Methodology 15 4 2006 329 359 (Pubitemid 44728695)
27. Z. Li, and Y. Zhou PR-Miner: automatically extracting implicit programming rules and detecting violations in large software code Proceedings of the Joint Meeting of the European Conference on Software Engineering and the ACM SIGSOFT Symposium on Foundations of Software Engineering, pp. 306-315 2005
28. B. Livshits, and T. Zimmermann DynaMine: finding common error patterns by mining software revision histories Proceedings of the Joint Meeting of the European Conference on Software Engineering and the ACM SIGSOFT Symposium on Foundations of Software Engineering, pp. 296-305 2005
29. C. Unkel, and M. Lam Automatic inference of stationary fields: A generalization of java's final fields Proceedings of the International Symposium on Principles of Programming Languages, pp. 183-195 2008
30. M.N. Ngo, and H.B. Tan Detecting large number of infeasible paths through recognizing their patterns Proceedings of the Joint Meeting of the European Conference on Software Engineering and the ACM SIGSOFT Symposium on Foundations of Software Engineering, pp. 215-224 2007
31. H. Liu, and H.B. Tan Testing input validation in Web applications through automated model recovery The Journal of Systems and Software 81 2 2008 222 233 (Pubitemid 350245524)
32. H. Liu, and H.B. Tan Covering code behavior on input validation in functional testing Information and Software Technology 81 2 2009 546 553
33. Y. Xie, and A. Aiken Static detection of security vulnerabilities in scripting languages Proceedings of USENIX Security Symposium, pp. 179-192 2006