~/talk

Pointer Analysis for Database-Backed Applications

on YouTube 19m
Talkat PLDI 2025 · 2025-06-16..06-20· [databases, java]

speakers

name:Yufei Liang
links:none on file
name:Teng Zhang
links:none on file
name:Ganlin Li
links:none on file
name:Tian Tan
links:none on file
name:Chang Xu
links:none on file
name:Chun Cao
links:none on file
name:Xiaoxing Ma
links:none on file
name:Yue Li
links:none on file

resources

video:https://youtu.be/w816spxBmZM
slides:none on file

summary

DBridge is an end-to-end pointer analysis that constructs Java-to-database value flows for JDBC/Hibernate/Spring Data JPA apps, implemented as 14K LoC and released with a 22K LoC micro-benchmark suite. It models framework and SQL behavior with framework primitives and SQL primitives, passes 721/824 microbenchmark cases, outperforms sLocator on SQL identification, and discovers 30 Stored XSS and 3 horizontal broken access control vulnerabilities in real apps.

AI-written summary · about

chapters (10)

  1. 0:00Dbridge framework intro
  2. 1:29Stored XSS vulnerability example
  3. 3:16Static analysis limitations
  4. 6:26Two-phase primitives for DB frameworks
  5. 7:54Dbridge architecture
  6. 9:18Evaluation on DB Michael
  7. 10:43SQL identification comparison
  8. 11:25Security analysis results
  9. 12:33Conclusion and release
  10. 13:19Q&A

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.