Managing data constraints in database-backed web applications
Junwen Yang, Utsav Sethi, Cong Yan, Alvin Cheung, Shan Lu
Abstract
Database-backed web applications manipulate large amounts of persistent data, and such applications often contain constraints that restrict data length, data value, and other data properties. Such constraints are critical in ensuring the reliability and usability of these applications. In this paper, we present a comprehensive study on where data constraints are expressed, what they are about, how often they evolve, and how their violations are handled. The results show that developers struggle with maintaining consistent data constraints and checking them across different components and versions of their web applications, leading to various problems. Guided by our study, we developed checking tools and API enhancements that can automatically detect such problems and improve the quality of such applications.
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Cited by top-tier papers6
- Leveraging Application Data Constraints to Optimize Database-Backed Web ApplicationsXiaoxuan Liu, Shuxian Wang, Mengzhu Sun, Sicheng Pan et al.VLDB 2023 · 13 citations
- Retrieving Data Constraint Implementations Using Fine-Grained Code PatternsJuan Manuel Florez, Jonathan Perry, Shiyi Wei, Andrian MarcusICSE 2022 · 6 citations
- Verifying Data Constraint Equivalence in FinTech SystemsChengpeng Wang, Gang Fan, Peisen Yao, Fuxiong Pan et al.ICSE 2023 · 4 citations
- Generating Test Databases for Database-Backed ApplicationsCong Yan, Suman Nath, Shan LuICSE 2023 · 4 citations
- Detecting Broken Object-Level Authorization Vulnerabilities in Database-Backed ApplicationsYongheng Huang, Chenghang Shi, Jie Lu, Haofeng Li et al.CCS 2024 · 4 citations
Builds on1
Related papers
- Protecting Data Integrity of Web Applications with Database Constraints Inferred from Application CodeHaochen Huang, Bingyu Shen, Li Zhong, Yuanyuan ZhouASPLOS 2023 · 16 citations
- DCLINK: Bridging Data Constraint Changes and Implementations in FinTech SystemsWensheng Tang, Chengpeng Wang, Peisen Yao, Rongxin Wu et al.ASE 2023 · 1 citation
- SQLCheck: Automated Detection and Diagnosis of SQL Anti-PatternsPrashanth Dintyala, Arpit Narechania, Joy ArulrajSIGMOD 2020 · 26 citations
- API-Misuse Detection Driven by Fine-Grained API-Constraint Knowledge GraphXiaoxue Ren, Xinyuan Ye, Zhenchang Xing, Xin Xia et al.ASE 2020 · 62 citations
- Plug the Database & Play With Automatic Testing: Improving System Testing by Exploiting Persistent DataDiego Clerissi, Giovanni Denaro, Marco Mobilio, Leonardo MarianiASE 2020 · 1 citation
