• Title/Summary/Keyword: SQL query

Search Result 233, Processing Time 0.037 seconds

HTTP Request - SQL Query Mapping Scheme for Malicious SQL Query Detection in Multitier Web Applications (Multitier 웹 어플리케이션 환경에서 악의적인 SQL Query 탐지를 위한 HTTP Request - SQL Query 매핑 기법)

  • Seo, Yeongung;Park, Seungyoung
    • Journal of KIISE
    • /
    • v.44 no.1
    • /
    • pp.1-12
    • /
    • 2017
  • The continuously growing internet service requirements has resulted in a multitier system structure consisting of web server and database (DB) server. In this multitier structure, the existing intrusion detection system (IDS) detects known attacks by matching misused traffic patterns or signatures. However, malicious change to the contents at DB server through hypertext transfer protocol (HTTP) requests at the DB server cannot be detected by the IDS at the DB server's end, since the DB server processes structured query language (SQL) without knowing the associated HTTP, while the web server cannot identify the response associated with the attacker's SQL query. To detect these types of attacks, the malicious user is tracked using knowledge on interaction between HTTP request and SQL query. However, this is a practical challenge because system's source code analysis and its application logic needs to be understood completely. In this study, we proposed a scheme to find the HTTP request associated with a given SQL query using only system log files. We first generated an HTTP request-SQL query map from system log files alone. Subsequently, the HTTP request associated with a given SQL query was identified among a set of HTTP requests using this map. Computer simulations indicated that the proposed scheme finds the HTTP request associated with a given SQL query with 94% accuracy.

A Multimedia Retrieval Query Language for Multimedia Database Presentation (멀티미디어 데이타베이스의 프렌젠텐이션을 위한 멀티미디어 검색 질의어)

  • Nah, Yun-Mook
    • The Transactions of the Korea Information Processing Society
    • /
    • v.4 no.5
    • /
    • pp.1162-1171
    • /
    • 1997
  • This paper proposes a multimedia retrival query lanfuage SQL/MR(SQL/Mulitmedia Reteival) to presrnt query results including multimeadia data temporal-spatially for retrival-oriented multimedia applications.Es-pecially, we describe the syntax of SQL/MR, query examples, and algorithms to process the temporai-spatial layout tags. SQL/MR extends the SELECT clause of SQL to eliminate time-comsuming authoring efforts for every query retrieval. SQL/MR can the utilized in relational DBMSs, which store multimedia data separately in minomedia type fields.

  • PDF

Design and Implementation of a Translator form XQuery to SQL : 2003 (XQuery SQL:2003 번역기 설계 및 구현)

  • Kim, Song-Hyon;Park, Young-Sup;Lee, Yoon-Joon
    • Journal of KIISE:Databases
    • /
    • v.33 no.7
    • /
    • pp.668-681
    • /
    • 2006
  • Due to its diverse advantages, XML has secured its position as a standard for data representation and exchange in the Internet. As a consequence, there has been much research on efficient storing and query processing of in data. Storing XML data in a relational database system warrants much benefit in data management and query processing; the system provides a strong query processing and data management function and can be applicable to XML data, its function being extended. In this paper, we design and implement a query translator that translates XQuery, a representative XML query language, into SQL:2003 query. SQL:2003, the latest SQL standard used as a substitute for SQL:1999, defines SQL/XML that supports XML. The main contribution of this paper is as follows: First, we look into the supporting features of XML, defined in the SQL:2003 standard, and propose a user-defined function for shortcoming sections. Second, we propose a way to translate XQuery into SQL that observes the latest SQL standard. Third, we describe in detail the design and the implementation of the translator to show its feasibility as a translator.

SPARQL Query Processing System over Scalable Triple Data using SparkSQL Framework (SparQLing : SparkSQL 기반 대용량 트리플 데이터를 위한 SPARQL 질의 시스템 구축)

  • Jeon, MyungJoong;Hong, JinYoung;Park, YoungTack
    • Journal of KIISE
    • /
    • v.43 no.4
    • /
    • pp.450-459
    • /
    • 2016
  • Every year, RDFS data tends further toward scalability; hence, the manner of SPARQL processing needs to be changed for fast query. The query processing method of SPARQL has been studied using a scalable distributed processing framework. Current studies indicate that the query engine based on the scalable distributed processing framework i.e., Hadoop(MapReduce) is not suitable for real-time processing because of the repetitive tasks; in addition, it is difficult to construct a query engine based on an In-memory Distributed Query engine, because distributed structure on the low-level is required to be considered. In this paper, we proposed a method to construct a query engine for improving the speed of the query process with the mass triple data. The query engine processes the query of SPARQL using the SparkSQL, which is an In-memory based, distributed query processing framework. SparkSQL is a high-level distributed query engine that facilitates existing SQL statement. In order to process the SPARQL query, after generating the Algebra Tree using Jena, the Algebra Tree is required to be translated to Spark Algebra Tree for application in the Spark system, and construction of the system that generated the SparkSQL query. Furthermore, we proposed the design of triple property table based on DataFrame for more efficient query processing in the Spark system. Finally, we verified the validity through comparative evaluation with the query engine, which is the existing distributed processing framework.

A Spatial Structural Query Language-G/SQL

  • Fang, Yu;Chu, Fang;Xinming, Tang
    • Proceedings of the KSRS Conference
    • /
    • 2002.10a
    • /
    • pp.860-879
    • /
    • 2002
  • Traditionally, Geographical Information Systems can only process spatial data in a procedure-oriented way, and the data can't be treated integrally. This method limits the development of spatial data applications. A new and promising method to solve this problem is the spatial structural query language, which extends SQL and provides integrated accessing to spatial data. In this paper, the theory of spatial structural query language is discussed, and a new geographical data model based on the concepts and data model in OGIS is introduced. According to this model, we implemented a spatial structural query language G/SQL. Through the studies of the 9-Intersection Model, G/SQL provides a set of topological relational predicates and spatial functions for GIS application development. We have successfully developed a Web-based GIS system-WebGIS-using G/SQL. Experiences show that the spatial operators G/SQL offered are complete and easy-to-use. The BNF representation of G/SQL syntax is included in this paper.

  • PDF

An SQL Function for the Construction of Recursively Structured XML values from the Relational Data (관계 데이터로부터 재귀적 구조의 XML 값을 생성하는 SQL 함수)

  • Park, Sung-Chul;Park, Young-Chul
    • Journal of KIISE:Computing Practices and Letters
    • /
    • v.15 no.4
    • /
    • pp.309-313
    • /
    • 2009
  • SQL:2003 standard provides SQL/XML publishing functions to publish the result of an SQL query as XML values but it does not provide any SQL/XML publishing function that can publish the result of a recursive query as recursively structured XML values. Therefore, for the relational tuples which are connected directly or indirectly according to given conditions, to publish both the contents of them and the relationship among them as XML values with the use of appropriate SQL/XML publishing functions, we have to write a nested SQL query. Writing that query, however, is not easy provided that the depth of the connections is deep even if we know the depth of them and is not possible once the depth of the connections is not known in advance. In order to resolve that problem, we propose a new SQL function XMLNEST that can publish the result of a recursive query as recursively structured XML values.

Spatial Big Data Query Processing System Supporting SQL-based Query Language in Hadoop (Hadoop에서 SQL 기반 질의언어를 지원하는 공간 빅데이터 질의처리 시스템)

  • Joo, In-Hak
    • The Journal of Korea Institute of Information, Electronics, and Communication Technology
    • /
    • v.10 no.1
    • /
    • pp.1-8
    • /
    • 2017
  • In this paper we present a spatial big data query processing system that can store spatial data in Hadoop and query the data with SQL-based query language. The system stores large-scale spatial data in HDFS-based storage system, and supports spatial queries expressed in SQL-based query language extended for spatial data processing. It supports standard spatial data types and functions defined in OGC simple feature model in the query language. This paper presents the development of core functions of the system including query language parsing, query validation, query planning, and connection with storage system. We compares the performance of the suggested system with an existing system, and our experiments show that the system shows about 58% performance improvement of query execution time over the existing system when executing region query for spatial data stored in Hadoop.

Experiments of Search Query Performance for SQL-Based Open Source Databases

  • Min, Meekyung
    • International Journal of Internet, Broadcasting and Communication
    • /
    • v.10 no.2
    • /
    • pp.31-38
    • /
    • 2018
  • As the use of open source databases grows, so does need to evaluate, the performance of search queries for these databases. This paper compares the search query performance of SQL-based open source databases with commercial databases through experiments. The targets are MySql, MariaDB, and MS-SQL Server. In this study, the execution time of various types of search queries are measured. Also, search query performance was experimented according to change of index and number of tuples. Experimental results show that SQL-based open source databases have the potential to replace commercial databases when indexes are used and the number of tuples is not very large.

SQL-based Semantic Query Processing in the OWL-aware Relational Model (OWL 인식 관계형 모델에서 SQL 기반의 시맨틱 질의 처리)

  • Kim, Hak-Soo;Son, Jin-Hyun
    • Journal of KIISE:Databases
    • /
    • v.35 no.1
    • /
    • pp.44-53
    • /
    • 2008
  • According to the widespread use of ontology-based applications, it is critical to efficiently store and process semantic information. Even though several related systems have been developed, they have some limitations in perspectives of the volume of target semantic data, the performance of semantic query processing, and the semantic data maintenance. In this paper we propose the OWL-aware relational model for the ontology management system and SQL-based semantic query processing mechanism. Also, to verify the query processing performance, we show that the proposed query professing mechanism is more efficient than sesame.

Filter Query to SQL transformation for the ebXML Registry (ebXML Registry에 대한 Filter Query의 SQL 변환 기법)

  • 조강녕;박재홍;김상균;이규철;조현규
    • Proceedings of the Korean Information Science Society Conference
    • /
    • 2001.10a
    • /
    • pp.40-42
    • /
    • 2001
  • ebXML[1]은 UN/CEFACT와 OASIS가 주축으로 제정한 전자상거래 국제 표준으로 모든 거래 당사자들에게 상호 운용성, 안전 및 일관성 있는 방법으로 XML 기반의 구조를 제공하여 광범위 한 e-business 정보 사용이 가능하도록 하는 것을 목적으로 한다. ebXML Registry/Repository는 ehXML을 기반으로 한 전자상거래 시스템의 핵심 부분을 구성하며 Browse & Drill Down Query Filter Query와 같은 메커니즘을 기본적으로 제공하고 SQL Query를 선택적으로 지원한다. 본 논문에서 RDBMS상에서 Registry 시스템의 필수 질의 서비스인 Filter Query를 구현하기 위해 SQL로의 변놘 방법을 제안하고 적용 예를 설명한다.

  • PDF