CAREER: Reliability and Security of Database and Web Applications

职业：数据库和 Web 应用程序的可靠性和安全性

• 批准号: 0546844
• 负责人: Zhendong Su
• 金额: $ 45万
• 依托单位: University of California-Davis
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2006
• 资助国家: 美国
• 起止时间: 2006-02-15 至 2012-01-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0546844&HistoricalAwards=false
• 关键词: CAREER; Reliability; Security; Database; Web

CCF-0546844Zhendong SuUniversity of California -DavisCAREER: Reliability and Security of Database and Web ApplicationsDatabase and web applications contain many critical faults, seriously undermining the security and reliability of our national information system infrastructures. Many such errors are introduced because ofthese applications' dynamic and complex interactions with outside environments such as dynamically constructing queries to access a database. Thus, it is important to automatically enforce the correctness of these interactions, but no such technique or tool exists. Consequently, these applications are susceptible to serious failures and security threats. This project proposes a novel, systematic analysis framework to address this problem. With static analysis and runtime checking as its foundation, this framework willoffer a rigorous and comprehensive approach to validate and enforce large classes of high-level properties specific to database and web applications. The additional educational component includes the development of an interdisciplinary course integrating concepts from databases, programming languages, software engineering, and computer security to address the educational need of engineering robust database-intensive applications. This project is expected to impact both industry and academia. Analysis tools developed in the projectwill be distributed for teaching, research, and experimental evaluation at other institutions and by industry. This project will also produce publicly available instructional materials including web sites and courseware that help people write more reliable and secure database and web applications, and serve as a clearing house for development tools such as the ones from this project.

CCF-0546844Zhendong SuUniversity of California -DavisCAREER: Reliability and Security of Database and Web ApplicationsDatabase and web applications contain many critical faults, seriously undermining the security and reliability of our national information system infrastructures. 由于这些应用程序与外部环境的动态和复杂的交互而引入了许多此类错误，例如动态构建查询以访问数据库。 因此，重要的是要自动执行这些相互作用的正确性，但是不存在这种技术或工具。因此，这些应用程序容易受到严重失败和安全威胁的影响。 该项目提出了一个新颖的系统分析框架来解决此问题。 通过静态分析和运行时检查作为其基础，该框架将采用一种严格而全面的方法来验证和执行与数据库和Web应用程序相关的大量高级属性。 附加的教育组成部分包括开发跨学科课程，该课程整合数据库，编程语言，软件工程和计算机安全的概念，以满足工程强大数据库密集型应用程序的教育需求。 该项目有望影响行业和学术界。 项目将在项目中开发的分析工具，用于在其他机构和行业中分发用于教学，研究和实验评估。 该项目还将生产公开可用的教学材料，包括网站和课件，以帮助人们编写更可靠，安全的数据库和Web应用程序，并用作开发工具（例如该项目的工具）的交换所。