Securing native XML database-driven web applications from XQuery injection vulnerabilities

2016 ◽  
Vol 122 ◽  
pp. 93-109 ◽  
Author(s):  
Nushafreen Palsetia ◽  
G. Deepa ◽  
Furqan Ahmed Khan ◽  
P. Santhi Thilagam ◽  
Alwyn R. Pais
Author(s):  
Andreas M. Weiner ◽  
Theo Härder

Since the very beginning of query processing in database systems, cost-based query optimization has been the essential strategy for effectively answering complex queries on large documents. XML documents can be efficiently stored and processed using native XML database management systems. Even though such systems can choose from a huge repertoire of join operators (e. g., Structural Joins and Holistic Twig Joins) and various index access operators to efficiently evaluate queries on XML documents, the development of full-fledged XML query optimizers is still in its infancy. Especially the evaluation of complex XQuery expressions using these operators is not well understood and needs further research. The extensible, rule-based, and cost-based XML query optimization framework proposed in this chapter, serves as a testbed for exploring how and whether well-known concepts from relational query optimization (e. g., join reordering) can be reused and which new techniques can make a significant contribution to speed-up query execution. Using the best practices and an appropriate cost model that will be developed using this framework, it can be turned into a robust cost-based XML query optimizer in the future.


2014 ◽  
Vol 971-973 ◽  
pp. 1624-1627
Author(s):  
Jun Zhang ◽  
Jian Qiang Zhang ◽  
Hong Yan Zhao

Database is the foundation of making IETM, database structure has great influence to the TETM production method and use efficiency. Aiming at the defects when using relational database to process XML documents, According to the characteristics of IETM data module and information objects under S1000D standard, native XML database needed to meeting the conditions were analyzed, using a native XML database technology to structure IETM data Module and information set; and giving data module code, information objects, information control composition structure codes of the data module structure, gives the design method of IETM database storage and index model, which can effectively avoid the traditional the deficiency of IETM database support for XML technology.


2006 ◽  
Vol 11 (5) ◽  
pp. 1192-1196 ◽  
Author(s):  
Meng Xiaofeng ◽  
Wang Xiaofeng ◽  
Xie Min ◽  
Zhang Xin ◽  
Zhou Junfeng

Author(s):  
David J. Birnbaum ◽  
Hugh Cayless ◽  
Emmanuelle Morlock ◽  
Leif-Jöran Olsson ◽  
Joseph Wicentowski

We have identified four models for integrating digital edition content into eXist-db [eXist-db], which are, in increasing order of dependence on eXist-db itself: 1) using Apache [Apache] and PHP [PHP] to mediate between the user and eXist-db, so that eXist-db provides only XML database services, 2) a pure XQuery framework for building an eXist-db web application [Web applications], 3) the eXist-db HTML templating framework [HTML templating], and 4) TEI Publisher [TEI Publisher]. Our examination and comparison of these ways of conceptualizing and implementing the infrastructure for a digital edition reveals that each of them has advantages and disadvantages, primarily from the perspective of sustainability. These considerations apply to edition frameworks generally, and are therefore not specific to eXist-db, which has been used here as an example because of the number of editions that employ it and the variety of models it currently supports.


2004 ◽  
Vol 69 (1-2) ◽  
pp. 87-104 ◽  
Author(s):  
Sudhanshu Sipani ◽  
Kunal Verma ◽  
John A. Miller ◽  
Boanerges Aleman-Meza

Sign in / Sign up

Export Citation Format

Share Document