Protecting Data Integrity of Web Applications with Database Constraints Inferred from Application Code
Haochen Huang, Bingyu Shen, Li Zhong, Yuanyuan Zhou
2023Year
16Citations
4Top-tier citations
Abstract
Database-backed web applications persist a large amount of production data and have high requirements for integrity. To protect data integrity against application code bugs and operator mistakes, most RDBMSes allow application developers to specify various types of integrity constraints. Unfortunately, applications (e.g., e-commerce web apps) often do not take full advantage of this capability and miss specifying many database constraints, resulting in many severe consequences, such as crashing the order placement page and corrupting the store inventory data.
Ask about this paper
Ask your agent about it.
Lune has read the top-tier papers around this one, so every answer names the papers it rests on.
Cited by top-tier papers4
- Detecting Broken Object-Level Authorization Vulnerabilities in Database-Backed ApplicationsYongheng Huang, Chenghang Shi, Jie Lu, Haofeng Li et al.CCS 2024 · 4 citations
- DCLINK: Bridging Data Constraint Changes and Implementations in FinTech SystemsWensheng Tang, Chengpeng Wang, Peisen Yao, Rongxin Wu et al.ASE 2023 · 1 citation
- Multiview: Finding Blind Spots in Access-Deny Issues DiagnosisBingyu Shen, Tianyi Shan, Yuanyuan ZhouUSENIX Security 2023
- Effective Bug Detection with Unused DefinitionsLi Zhong, Chengcheng Xiang, Haochen Huang, Bingyu Shen et al.EuroSys 2024
Related papers
- Managing data constraints in database-backed web applicationsJunwen Yang, Utsav Sethi, Cong Yan, Alvin Cheung et al.ICSE 2020 · 9 citations
- Differentially Testing Database Transactions for Fun and ProfitZiyu Cui, Wensheng Dou, Qianwang Dai, Jiansen Song et al.ASE 2022 · 22 citations
- Ad Hoc Transactions in Web Applications: The Good, the Bad, and the UglyChuzhe Tang, Zhaoguo Wang, Xiaodong Zhang, Qianmian Yu et al.SIGMOD 2022 · 20 citations
- Leveraging Application Data Constraints to Optimize Database-Backed Web ApplicationsXiaoxuan Liu, Shuxian Wang, Mengzhu Sun, Sicheng Pan et al.VLDB 2023 · 13 citations
- Database Deadlock Diagnosis for Large-Scale ORM-Based Web ApplicationsZhiyuan Dong, Zhaoguo Wang, Chuanwei Yi, Xian Xu et al.ICDE 2023 · 7 citations
