一句话:从 Web 应用代码自动推断数据库完整性约束,以保护数据完整性。
数据库支持的 Web 应用持久化大量生产数据,对完整性要求很高。为防范应用代码缺陷和运维误操作,多数 RDBMS 允许开发者声明完整性约束,但电商等应用常未充分利用该能力,漏掉许多数据库约束,导致下单页面崩溃、库存数据损坏等严重后果。为此,论文提出从应用代码中推断数据库完整性约束,并将这些约束用于数据库层以阻止违反完整性的状态。摘要未详述具体推断算法、工具实现及实验评估。
Database-backed web applications persist a large amount of production data and have high requirements for integrity. To protect data integrity against application code bugs and operator mistakes, most RDBMSes allow application developers to specify various types of integrity constraints. Unfortunately, applications (e.g., e-commerce web apps) often do not take full advantage of this capability and miss specifying many database constraints, resulting in many severe consequences, such as crashing the order placement page and corrupting the store inventory data.
@inproceedings{paperbot10047,
title = {Protecting Data Integrity of Web Applications with Database Constraints Inferred from Application Code},
author = {Haochen Huang and Bingyu Shen and Li Zhong and Yuanyuan Zhou},
booktitle = {ASPLOS},
year = {2023},
doi = {10.1145/3575693.3575699}
}