Researchers from Microsoft proposed a static analysis
methodology for database application binaries in a general sense
[28]. Their method enhances traditional optimizing compilers
with knowledge about data access APIs (e.g. ADO.NET) and
database domains. The solution is based on a compiler
framework, adopting data flow and control flow analysis
customized for database access, forming “a layer of static analysis
services for database applications”, on top of which vertical tools
are built with different functionalities such as detecting SQL
injection vulnerabilities, “extracting the SQL workloads from the
binaries”, or identifying potential data integrity violations. The
static analysis framework aims to make the application code more
DBMS-friendly, but treats performance as one feature among
many auxiliaries of collecting workload etc.
Researchers from Microsoft proposed a static analysismethodology for database application binaries in a general sense[28]. Their method enhances traditional optimizing compilerswith knowledge about data access APIs (e.g. ADO.NET) anddatabase domains. The solution is based on a compilerframework, adopting data flow and control flow analysiscustomized for database access, forming “a layer of static analysisservices for database applications”, on top of which vertical toolsare built with different functionalities such as detecting SQLinjection vulnerabilities, “extracting the SQL workloads from thebinaries”, or identifying potential data integrity violations. Thestatic analysis framework aims to make the application code moreDBMS-friendly, but treats performance as one feature amongmany auxiliaries of collecting workload etc.
การแปล กรุณารอสักครู่..