专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07860842B2 Mechanism to detect and analyze SQL injection threats 有权
标题翻译：检测和分析SQL注入威胁的机制
公开(公告)号：US07860842B2
公开(公告)日：2010-12-28
申请号：US11082280
申请日：2005-03-16
申请人： Dmitri Bronnikov , Charles Wetherell
发明人： Dmitri Bronnikov , Charles Wetherell
IPC分类号： G06F7/00
CPC分类号： G06F21/577
摘要： A vulnerability analysis tool is provided for identifying SQL injection threats. The tool is able to take advantage of the fact that the code for many database applications is located in modules stored within a database. The tool constructs a data flow graph based on all, or a specified subset, of the application code within the database. The tool identifies, within the data flow graph, the nodes that represent values used to construct SQL commands. Paths to those nodes are analyzed to determine whether any SQL injection threats exist.
摘要翻译：提供了一个漏洞分析工具来识别SQL注入威胁。该工具能够利用许多数据库应用程序的代码位于数据库中存储的模块中。该工具根据数据库中的应用程序代码的所有或指定的子集构建数据流图。该工具在数据流图中识别代表用于构造SQL命令的值的节点。分析那些节点的路径，以确定是否存在任何SQL注入威胁。

2. 发明授权

US07752177B2 Mechanism to detect and analyze SQL injection threats 有权
公开(公告)号：US07752177B2
公开(公告)日：2010-07-06
申请号：US11082280
申请日：2005-03-16
申请人： Dmitri Bronnikov , Charles Wetherell
发明人： Dmitri Bronnikov , Charles Wetherell
IPC分类号： G06F7/00
摘要： A vulnerability analysis tool is provided for identifying SQL injection threats. The tool is able to take advantage of the fact that the code for many database applications is located in modules stored within a database. The tool constructs a data flow graph based on all, or a specified subset, of the application code within the database. The tool identifies, within the data flow graph, the nodes that represent values used to construct SQL commands. Paths to those nodes are analyzed to determine whether any SQL injection threats exist.

3. 发明申请

US20060212941A1 Mechanism to detect and analyze SQL injection threats 有权
标题翻译：检测和分析SQL注入威胁的机制
公开(公告)号：US20060212941A1
公开(公告)日：2006-09-21
申请号：US11082280
申请日：2005-03-16
申请人： Dmitri Bronnikov , Charles Wetherell
发明人： Dmitri Bronnikov , Charles Wetherell
IPC分类号： G06F12/14
CPC分类号： G06F21/577
摘要： A vulnerability analysis tool is provided for identifying SQL injection threats. The tool is able to take advantage of the fact that the code for many database applications is located in modules stored within a database. The tool constructs a data flow graph based on all, or a specified subset, of the application code within the database. The tool identifies, within the data flow graph, the nodes that represent values used to construct SQL commands. Paths to those nodes are analyzed to determine whether any SQL injection threats exist.
摘要翻译：提供了一个漏洞分析工具来识别SQL注入威胁。该工具能够利用许多数据库应用程序的代码位于数据库中存储的模块中。该工具根据数据库中的应用程序代码的所有或指定的子集构建数据流图。该工具在数据流图中识别代表用于构造SQL命令的值的节点。分析那些节点的路径，以确定是否存在任何SQL注入威胁。

4. 发明授权

US07930707B2 Optimizing code motion with delayed exception handling 有权
标题翻译：通过延迟异常处理优化代码运动
公开(公告)号：US07930707B2
公开(公告)日：2011-04-19
申请号：US11431208
申请日：2006-05-10
申请人： Dmitri Bronnikov
发明人： Dmitri Bronnikov
IPC分类号： G06F3/00 , G06F9/45
CPC分类号： G06F8/445 , G06F9/4812 , G06F2209/481
摘要： Systems, methods, media, and other embodiments associated with optimizing code motion with delayed exception handling are described. One exemplary system embodiment includes a data store to store information about a relocated instruction, a relocation logic to relocate instructions, and a run-time logic to detect exceptions raised by executed instructions. The run-time logic may selectively delay handling exceptions based on whether an executed instruction is a relocated instruction.
摘要翻译：描述了与延迟异常处理优化代码运动相关联的系统，方法，介质和其他实施例。一个示例性系统实施例包括用于存储关于重定位指令的信息的数据存储器，重新定位指令的重定位逻辑以及用于检测被执行指令引发的异常的运行时逻辑。运行时逻辑可以基于所执行的指令是否被重新定位的指令来选择性地延迟处理异常。

5. 发明授权

US08793240B2 Generation of machine code for a database statement by specialization of interpreter code 有权
标题翻译：通过专业化的解释器代码生成数据库语句的机器代码
公开(公告)号：US08793240B2
公开(公告)日：2014-07-29
申请号：US13219574
申请日：2011-08-26
申请人： Dmitry M. Potapov , Dmitri Bronnikov
发明人： Dmitry M. Potapov , Dmitri Bronnikov
IPC分类号： G06F17/30 , G06F7/00
CPC分类号： G06F17/30436
摘要： After receipt of an instruction (e.g. a database statement), one or more computers specialize an interpreter with the received instruction as constant, to obtain a specialized interpreter that is stored in memory and/or disk. The specialized interpreter is then invoked to execute the received instruction. Depending on the embodiment, the interpreter being specialized may additionally be received and used in binary form without specialization. Specifically, in some embodiments, an identical interpreter is received in two forms: in a binary language specific to the one or more computers and also in a language that is acceptable to a specializer, such as a source language or an intermediate language. The interpreter in the binary language is invoked by default unless a predetermined condition for specialization is met. When the predetermined condition is met, the interpreter in the specializer-acceptable language is specialized by the specializer, and then the specialized interpreter is invoked.
摘要翻译：在接收到指令（例如数据库语句）之后，一个或多个计算机将接收到的指令的解释器专门化为常数，以获得存储在存储器和/或盘中的专用解释器。然后调用专门的解释器来执行接收到的指令。根据实施例，专门的解释器可以另外以二进制形式被接收和使用而不专门化。具体来说，在一些实施例中，相同的解释器以两种形式被接收：以一种或多种计算机专用的二进制语言，以及专业人员可接受的语言，例如源语言或中间语言。默认情况下调用二进制语言的解释器，除非满足专门化的预定条件。当满足预定条件时，专业人员可接受的语言的解释器由专业人员专门化，然后调用专门的解释器。

6. 发明申请

US20130054649A1 GENERATION OF MACHINE CODE FOR A DATABASE STATEMENT BY SPECIALIZATION OF INTERPRETER CODE 有权
标题翻译：通过专门编码解码器代码生成数据库语句的机器码
公开(公告)号：US20130054649A1
公开(公告)日：2013-02-28
申请号：US13219574
申请日：2011-08-26
申请人： Dmitry M. Potapov , Dmitri Bronnikov
发明人： Dmitry M. Potapov , Dmitri Bronnikov
IPC分类号： G06F17/30
CPC分类号： G06F17/30436
摘要： After receipt of an instruction (e.g. a database statement), one or more computers specialize an interpreter with the received instruction as constant, to obtain a specialized interpreter that is stored in memory and/or disk. The specialized interpreter is then invoked to execute the received instruction. Depending on the embodiment, the interpreter being specialized may additionally be received and used in binary form without specialization. Specifically, in some embodiments, an identical interpreter is received in two forms: in a binary language specific to the one or more computers and also in a language that is acceptable to a specializer, such as a source language or an intermediate language. The interpreter in the binary language is invoked by default unless a predetermined condition for specialization is met. When the predetermined condition is met, the interpreter in the specializer-acceptable language is specialized by the specializer, and then the specialized interpreter is invoked.
摘要翻译：在接收到指令（例如数据库语句）之后，一个或多个计算机将接收到的指令的解释器专门化为常数，以获得存储在存储器和/或盘中的专用解释器。然后调用专门的解释器来执行接收到的指令。根据实施例，专门的解释器可以另外以二进制形式被接收和使用而不专门化。具体来说，在一些实施例中，相同的解释器以两种形式被接收：以一种或多种计算机专用的二进制语言，以及专业人员可接受的语言，例如源语言或中间语言。默认情况下调用二进制语言的解释器，除非满足专门化的预定条件。当满足预定条件时，专业人员可接受的语言的解释器由专业人员专门化，然后调用专门的解释器。

7. 发明申请

US20070266375A1 Optimizing code motion with delayed exception handling 有权
标题翻译：通过延迟异常处理优化代码运动
公开(公告)号：US20070266375A1
公开(公告)日：2007-11-15
申请号：US11431208
申请日：2006-05-10
申请人： Dmitri Bronnikov
发明人： Dmitri Bronnikov
IPC分类号： G06F9/44
CPC分类号： G06F8/445 , G06F9/4812 , G06F2209/481
摘要： Systems, methods, media, and other embodiments associated with optimizing code motion with delayed exception handling are described. One exemplary system embodiment includes a data store to store information about a relocated instruction, a relocation logic to relocate instructions, and a run-time logic to detect exceptions raised by executed instructions. The run-time logic may selectively delay handling exceptions based on whether an executed instruction is a relocated instruction.
摘要翻译：描述了与延迟异常处理优化代码运动相关联的系统，方法，介质和其他实施例。一个示例性系统实施例包括用于存储关于重定位指令的信息的数据存储器，重新定位指令的重定位逻辑以及用于检测被执行指令引发的异常的运行时逻辑。运行时逻辑可以基于所执行的指令是否被重定位指令来选择性地延迟处理异常。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式