检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

5 篇 会议

馆藏范围

5 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

5 篇 工学
- 4 篇 软件工程
- 3 篇 计算机科学与技术...
- 1 篇 信息与通信工程

主题

5 篇 database-backed ...
3 篇 performance anti...
2 篇 object-relationa...
1 篇 access control
1 篇 bug study
1 篇 broken object-le...
1 篇 rubymine plugin

机构

3 篇 univ chicago il ...
2 篇 univ washington ...
1 篇 nyu ny usa
1 篇 icsi berkeley ca...
1 篇 cas univ chinese...
1 篇 inst comp techno...
1 篇 univ calif berke...

作者

3 篇 yang junwen
2 篇 subramaniam pran...
2 篇 yan cong
2 篇 lu shan
2 篇 cheung alvin
1 篇 li lian
1 篇 zhang wen
1 篇 huang yongheng
1 篇 panda aurojit
1 篇 meng haining
1 篇 lu jie
1 篇 shi chenghang
1 篇 shenker scott
1 篇 li haofeng

语言

5 篇 英文

检索条件"主题词=database-backed applications"

共 5 条记录，以下是1-10 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

Detecting Broken Object-Level Authorization Vulnerabilities in database-backed applications 24

Detecting Broken Object-Level Authorization Vulnerabilities ...

引用

31st Conference on Computer and Communications Security

作者： Huang, Yongheng Shi, Chenghang Lu, Jie Li, Haofeng Meng, Haining Li, Lian CAS Univ Chinese Acad Sci Beijing Inst Comp Technol SKLP Beijing Peoples R China Inst Comp Technol SKLP CAS Beijing Peoples R China

ISBN: (纸本)9798400706363

Broken object-level authorization (BOLA) vulnerabilities are among the most critical security risks facing database-backed applications. However, there is still a significant gap in our systematic understanding of these vulnerabilities. To bridge this gap, we conducted an in-depth study of 101 real-world BOLA vulnerabilities from open-source applications. Our study revealed the four most common object-level authorization models in database-backed application. The insights gained from our study inspired the development of a new tool called BolaRay. This tool employs a combination of SQL and static analysis to automatically infer the distinct types of object-level authorization models, and subsequently verify whether existing implementations enforce appropriate checks for these models. We evaluated BolaRay using 25 popular database-backed applications, which led to the identification of 193 true vulnerabilities, including 178 vulnerabilities that have never been reported before, at a false positive rate of 21.86%. We reported all newly identified vulnerabilities to the corresponding maintainers. To date, 155 vulnerabilities have been confirmed, with 52 CVE IDs

关键词： Broken Object-Level Authorization database-backed applications

来源：评论

学校读者我要写书评

暂无评论

PowerStation: Automatically Detecting and Fixing Inefficiencies of database-backed Web applications in IDE 2018

PowerStation: Automatically Detecting and Fixing Inefficienc...

引用

26th ACM Joint Meeting on European Software Engineering Conference (ESEC) / Symposium on the Foundations of Software Engineering (FSE)

作者： Yang, Junwen Yan, Cong Subramaniam, Pranav Lu, Shan Cheung, Alvin Univ Chicago Chicago IL 60637 USA Univ Washington Seattle WA 98195 USA

ISBN: (纸本)9781450355735

Modern web applications are built using a myriad of software components, and each of them exposes different programming models (e.g., application logic expressed in an imperative language, database queries expressed using declarative SQL). To improve programmer productivity, Object Relational Mapping (ORM) frameworks have been developed to allow developers build web applications in an object-oriented manner. Despite such frameworks, prior work has found that developers still struggle in developing performant ORM-based web applications. This paper presents PowerStation, a RubyMine IDE plugin for optimizing web applications developed using the Ruby on Rails ORM. Using automated static analysis, PowerStation detects ORM-related inefficiency problems and suggests fixes to developers. Our evaluation using 12 real-world applications shows that PowerStation can automatically detects 1221 performance issues across them. A tutorial on using PowerStation can be found at https://***/rAV8CGuSj6k.

关键词： performance anti-patterns Object-Relational Mapping frameworks database-backed applications RubyMine Plugin

来源：评论

学校读者我要写书评

暂无评论

How not to structure your database-backed web applications: a study of performance bugs in the wild 18

How <i>not</i> to structure your database-backed web applica...

引用

40th ACM/IEEE International Conference on Software Engineering (ICSE)

作者： Yang, Junwen Subramaniam, Pranav Lu, Shan Yan, Cong Cheung, Alvin Univ Chicago Chicago IL 60637 USA Univ Washington Seattle WA 98195 USA

ISBN: (纸本)9781450356381

Many web applications use databases for persistent data storage, and using Object Relational Mapping (ORM) frameworks is a common way to develop such database-backed web applications. Unfortunately, developing efficient ORM applications is challenging, as the ORM framework hides the underlying database query generation and execution. This problem is becoming more severe as these applications need to process an increasingly large amount of persistent data. Recent research has targeted specific aspects of performance problems in ORM applications. However, there has not been any systematic study to identify common performance anti-patterns in real-world such applications, how they affect resulting application performance, and remedies for them. In this paper, we try to answer these questions through a comprehensive study of 12 representative real-world ORM applications. We generalize 9 ORM performance anti-patterns from more than 200 performance issues that we obtain by studying their bug-tracking systems and profiling their latest versions. To prove our point, we manually fix 64 performance issues in their latest versions and obtain a median speedup of 2x (and up to 39x max) with fewer than 5 lines of code change in most cases. Many of the issues we found have been confirmed by developers, and we have implemented ways to identify other code fragments with similar issues as well.

关键词： performance anti-patterns Object-Relational Mapping frameworks database-backed applications bug study

来源：评论

学校读者我要写书评

暂无评论

Access Control for database applications: Beyond Policy Enforcement 23

Access Control for Database Applications: Beyond Policy Enfo...

引用

19th ACM Workshop on Hot Topics in Operating Systems (HotOS)

作者： Zhang, Wen Panda, Aurojit Shenker, Scott Univ Calif Berkeley Berkeley CA 94720 USA NYU New York NY USA ICSI Berkeley CA USA

There have been many recent advances in enforcing finegrained access control for database-backed applications. However, operators face significant challenges both before and after an enforcement mechanism has been dep... 详细信息

ISBN: (纸本)9798400701955

关键词： Access control database-backed applications

来源：评论

学校读者我要写书评

暂无评论

Improving Performance and Quality of database-backed Software 2019

Improving Performance and Quality of Database-Backed Softwar...

引用

International Conference on Systems, Programming, Languages, and applications: Software for Humanity (SPLASH)

作者： Yang, Junwen Univ Chicago Chicago IL 60637 USA

ISBN: (纸本)9781450369923

Modern web applications have stringent latency requirements while processing an ever-increasing amount of user data. To address these challenges and improve programmer productivity, Object Relational Mapping (ORM) frameworks have been developed to allow developers writing database processing code in an object-oriented manner. Despite such frameworks, prior work found that developers still struggle in developing ORM-based web applications. This paper presents a series of study and developed tools for optimizing web applications developed using the Ruby on Rails ORM. Using automated static analysis, we detect ORM related in-efficiency problems and suggests fixes to developers. Our evaluation on 12 real-world applications shows that more than 1000 performance issues can be detected and fixed.

关键词： performance anti-patterns database-backed applications

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共1页 << < 1 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：