CAREER: Reliability and Security of Database and Web Applications

职业：数据库和 Web 应用程序的可靠性和安全性

• 批准号: 0546844
• 负责人: Zhendong Su
• 金额: $ 45万
• 依托单位: University of California-Davis
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2006
• 资助国家: 美国
• 起止时间: 2006-02-15 至 2012-01-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0546844&HistoricalAwards=false
• 关键词: CAREER; Reliability; Security; Database; Web

CCF-0546844Zhendong SuUniversity of California -DavisCAREER: Reliability and Security of Database and Web ApplicationsDatabase and web applications contain many critical faults, seriously undermining the security and reliability of our national information system infrastructures. Many such errors are introduced because ofthese applications' dynamic and complex interactions with outside environments such as dynamically constructing queries to access a database. Thus, it is important to automatically enforce the correctness of these interactions, but no such technique or tool exists. Consequently, these applications are susceptible to serious failures and security threats. This project proposes a novel, systematic analysis framework to address this problem. With static analysis and runtime checking as its foundation, this framework willoffer a rigorous and comprehensive approach to validate and enforce large classes of high-level properties specific to database and web applications. The additional educational component includes the development of an interdisciplinary course integrating concepts from databases, programming languages, software engineering, and computer security to address the educational need of engineering robust database-intensive applications. This project is expected to impact both industry and academia. Analysis tools developed in the projectwill be distributed for teaching, research, and experimental evaluation at other institutions and by industry. This project will also produce publicly available instructional materials including web sites and courseware that help people write more reliable and secure database and web applications, and serve as a clearing house for development tools such as the ones from this project.

CCF-0546844苏振东加州大学戴维斯分校CAREER：数据库和Web应用程序的可靠性和安全性数据库和Web应用程序包含许多关键故障，严重破坏了我们国家信息系统基础设施的安全性和可靠性。 许多这样的错误是由于这些应用程序与外部环境的动态和复杂的交互而引入的，例如动态构造查询以访问数据库。 因此，自动强制这些交互的正确性是很重要的，但是不存在这样的技术或工具。因此，这些应用程序容易受到严重的故障和安全威胁。 该项目提出了一个新颖的，系统的分析框架来解决这个问题。 以静态分析和运行时检查为基础，该框架将提供一个严格和全面的方法来验证和执行特定于数据库和Web应用程序的大型高级属性。 额外的教育部分包括开发一门跨学科课程，将数据库，编程语言，软件工程和计算机安全的概念整合在一起，以满足工程强大的数据库密集型应用程序的教育需求。 预计该项目将对工业界和学术界产生影响。 在该项目中开发的分析工具可以分发给其他机构和行业的教学，研究和实验评估。 该项目还将制作公开可用的教学材料，包括网站和课件，帮助人们编写更可靠和安全的数据库和网络应用程序，并作为开发工具的信息交换所，如本项目的工具。