Aiming to improve the Structured Query Language( SQL) injection penetration test accuracy through the formalismguided test case generation,an attack purpose based attack tree model of SQL injection is proposed,and the...Aiming to improve the Structured Query Language( SQL) injection penetration test accuracy through the formalismguided test case generation,an attack purpose based attack tree model of SQL injection is proposed,and then under the guidance of this model, the formal descriptions for the SQL injection vulnerability feature and SQL injection attack inputs are established. Moreover,according to new coverage criteria,these models are instantiated and the executable test cases are generated.Experiments show that compared with the random enumerated test case used in other works,the test case generated by our method can detect the SQL injection vulnerability more effectively. Therefore,the false negative is reduced and the test accuracy is improved.展开更多
The advantage of recursive programming is that it is very easy to write and it only requires very few lines of code if done correctly.Structured query language(SQL)is a database language and is used to manipulate data...The advantage of recursive programming is that it is very easy to write and it only requires very few lines of code if done correctly.Structured query language(SQL)is a database language and is used to manipulate data.In Microsoft SQL Server 2000,recursive queries are implemented to retrieve data which is presented in a hierarchical format,but this way has its disadvantages.Common table expression(CTE)construction introduced in Microsoft SQL Server 2005 provides the significant advantage of being able to reference itself to create a recursive CTE.Hierarchical data structures,organizational charts and other parent-child table relationship reports can easily benefit from the use of recursive CTEs.The recursive query is illustrated and implemented on some simple hierarchical data.In addition,one business case study is brought forward and the solution using recursive query based on CTE is shown.At the same time,stored procedures are programmed to do the recursion in SQL.Test results show that recursive queries based on CTEs bring us the chance to create much more complex queries while retaining a much simpler syntax.展开更多
In this paper, an interval-gap-based 1NF temporal tuple calculus language and the corresponding temporal relation algebra are established on the basis of considering the trouble of stack operations in both S. Gadia’s...In this paper, an interval-gap-based 1NF temporal tuple calculus language and the corresponding temporal relation algebra are established on the basis of considering the trouble of stack operations in both S. Gadia’s TCAL and temporal tuple calculus due to their NINF.展开更多
XQuery是一种用于从XML文档中获取数据的查询语言,是W3C组织于2007年发布的推荐标准。其在XML格式数据中的作用,类似于标准SQL语言在关系数据库中的作用。XQuery功能强大,得到XML原生数据库以及支持XML的关系数据库的支持。对全面支持XM...XQuery是一种用于从XML文档中获取数据的查询语言,是W3C组织于2007年发布的推荐标准。其在XML格式数据中的作用,类似于标准SQL语言在关系数据库中的作用。XQuery功能强大,得到XML原生数据库以及支持XML的关系数据库的支持。对全面支持XML技术的SQL Server 2005数据库中XQuery语言的实现与应用进行研究,探讨了SQL Server 2005中实现XML数据查询的机制及其特点,分析了在SQL Server 2005中XQuery语言的运用,特别讨论了在SQL Server 2005中对XQuery标准所做的扩展,即其通过XQuery实现对XML文档中元素的操作,并通过具体示例阐明了SQL Server 2005中XQuery标准及其功能扩展的实现。展开更多
基金National Natural Science Foundation of China(No.51274150)Tianjin Major Project of Application Foundation and Advanced Technology,China(No.12JCZDJC27800)
文摘Aiming to improve the Structured Query Language( SQL) injection penetration test accuracy through the formalismguided test case generation,an attack purpose based attack tree model of SQL injection is proposed,and then under the guidance of this model, the formal descriptions for the SQL injection vulnerability feature and SQL injection attack inputs are established. Moreover,according to new coverage criteria,these models are instantiated and the executable test cases are generated.Experiments show that compared with the random enumerated test case used in other works,the test case generated by our method can detect the SQL injection vulnerability more effectively. Therefore,the false negative is reduced and the test accuracy is improved.
文摘The advantage of recursive programming is that it is very easy to write and it only requires very few lines of code if done correctly.Structured query language(SQL)is a database language and is used to manipulate data.In Microsoft SQL Server 2000,recursive queries are implemented to retrieve data which is presented in a hierarchical format,but this way has its disadvantages.Common table expression(CTE)construction introduced in Microsoft SQL Server 2005 provides the significant advantage of being able to reference itself to create a recursive CTE.Hierarchical data structures,organizational charts and other parent-child table relationship reports can easily benefit from the use of recursive CTEs.The recursive query is illustrated and implemented on some simple hierarchical data.In addition,one business case study is brought forward and the solution using recursive query based on CTE is shown.At the same time,stored procedures are programmed to do the recursion in SQL.Test results show that recursive queries based on CTEs bring us the chance to create much more complex queries while retaining a much simpler syntax.
基金Supported by both the High Technology Research Development Programme of Chinathe National Natural Science Foundation of China
文摘In this paper, an interval-gap-based 1NF temporal tuple calculus language and the corresponding temporal relation algebra are established on the basis of considering the trouble of stack operations in both S. Gadia’s TCAL and temporal tuple calculus due to their NINF.
文摘XQuery是一种用于从XML文档中获取数据的查询语言,是W3C组织于2007年发布的推荐标准。其在XML格式数据中的作用,类似于标准SQL语言在关系数据库中的作用。XQuery功能强大,得到XML原生数据库以及支持XML的关系数据库的支持。对全面支持XML技术的SQL Server 2005数据库中XQuery语言的实现与应用进行研究,探讨了SQL Server 2005中实现XML数据查询的机制及其特点,分析了在SQL Server 2005中XQuery语言的运用,特别讨论了在SQL Server 2005中对XQuery标准所做的扩展,即其通过XQuery实现对XML文档中元素的操作,并通过具体示例阐明了SQL Server 2005中XQuery标准及其功能扩展的实现。
