{"id":"https://openalex.org/W4400434626","doi":"https://doi.org/10.48550/arxiv.2407.04294","title":"SQLaser: Detecting DBMS Logic Bugs with Clause-Guided Fuzzing","display_name":"SQLaser: Detecting DBMS Logic Bugs with Clause-Guided Fuzzing","publication_year":2024,"publication_date":"2024-07-05","ids":{"openalex":"https://openalex.org/W4400434626","doi":"https://doi.org/10.48550/arxiv.2407.04294"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2407.04294","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2407.04294","pdf_url":"https://arxiv.org/pdf/2407.04294","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"text"},"type":"preprint","indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2407.04294","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5109452699","display_name":"Wei Jin","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wei, Jin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021641125","display_name":"Ping Chen","orcid":"https://orcid.org/0000-0003-0684-9665"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Ping","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043198742","display_name":"Kangjie Lu","orcid":"https://orcid.org/0000-0002-4763-7354"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lu, Kangjie","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103014017","display_name":"Jun Dai","orcid":"https://orcid.org/0000-0001-6894-7645"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dai, Jun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5100656311","display_name":"Xiaoyan Sun","orcid":"https://orcid.org/0000-0002-0321-2338"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sun, Xiaoyan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9962000250816345,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9962000250816345,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9872999787330627,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.986299991607666,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9043861031532288},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.6839917898178101},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6161994338035583},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.38882699608802795},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.0708414614200592}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9043861031532288},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.6839917898178101},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6161994338035583},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.38882699608802795},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.0708414614200592}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2407.04294","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2407.04294","pdf_url":"https://arxiv.org/pdf/2407.04294","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"text"},{"id":"doi:10.48550/arxiv.2407.04294","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2407.04294","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2407.04294","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2407.04294","pdf_url":"https://arxiv.org/pdf/2407.04294","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4400434626.pdf"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2511770387","https://openalex.org/W3120811337","https://openalex.org/W3203597304","https://openalex.org/W4385301282","https://openalex.org/W2990186179","https://openalex.org/W4248424560","https://openalex.org/W3023977444","https://openalex.org/W4210660460"],"abstract_inverted_index":{"Database":[0],"Management":[1],"Systems":[2],"(DBMSs)":[3],"are":[4,19,84,154],"vital":[5],"components":[6],"in":[7,108,146],"modern":[8],"data-driven":[9],"systems.":[10],"Their":[11],"complexity":[12],"often":[13],"leads":[14],"to":[15,28,68,86,199,202,230],"logic":[16,88,106,117,132,147,162,193],"bugs,":[17,148],"which":[18,83],"implementation":[20],"errors":[21],"within":[22],"the":[23],"DBMSs":[24],"that":[25,143,223],"can":[26],"lead":[27],"incorrect":[29],"query":[30],"results,":[31],"data":[32],"exposure,":[33],"unauthorized":[34],"access,":[35],"etc.,":[36],"without":[37],"necessarily":[38],"causing":[39,125],"visible":[40],"system":[41,126],"failures.":[42],"Existing":[43],"detection":[44,50,65,235],"employs":[45],"two":[46],"strategies:":[47],"rule-based":[48,64],"bug":[49,133,163,227],"and":[51,70,149,190,205,220],"coverage-guided":[52],"fuzzing.":[53],"In":[54,95],"general,":[55],"rule":[56],"specification":[57],"itself":[58],"is":[59,66,93],"challenging;":[60],"as":[61,138,165],"a":[62,101,111,155,176,180],"result,":[63],"limited":[67],"specific":[69],"simple":[71],"rules.":[72],"Coverage-guided":[73],"fuzzing":[74,232],"blindly":[75],"explores":[76],"code":[77],"paths":[78],"or":[79],"blocks,":[80],"many":[81],"of":[82,114,157,171],"unlikely":[85],"contain":[87],"bugs;":[89],"therefore,":[90],"this":[91,96],"strategy":[92],"cost-ineffective.":[94],"paper,":[97],"we":[98,128],"design":[99],"SQLaser,":[100],"SQL-clause-guided":[102],"fuzzer":[103,178],"for":[104,185],"detecting":[105],"bugs":[107,118,208],"DBMSs.":[109],"Through":[110],"comprehensive":[112],"examination":[113],"most":[115],"existing":[116],"across":[119],"four":[120],"distinct":[121],"DBMSs,":[122],"excluding":[123],"those":[124],"crashes,":[127],"have":[129],"identified":[130],"35":[131],"patterns.":[134],"These":[135],"patterns":[136,164],"manifest":[137],"certain":[139],"SQL":[140],"clause":[141,152],"combinations":[142,153],"commonly":[144],"result":[145],"behind":[150],"these":[151,188,211],"sequence":[156],"functions.":[158],"We":[159,173],"therefore":[160],"model":[161],"error-prone":[166],"function":[167],"chains":[168,189],"(ie,":[169],"sequences":[170],"functions).":[172],"further":[174],"develop":[175],"directed":[177],"with":[179],"new":[181],"path-to-path":[182],"distance-calculation":[183],"mechanism":[184,196],"effectively":[186],"testing":[187],"discovering":[191],"additional":[192],"bugs.":[194],"This":[195],"enables":[197],"SQLaser":[198,224],"swiftly":[200],"navigate":[201],"target":[203],"sites":[204],"uncover":[206],"potential":[207],"emerging":[209],"from":[210],"paths.":[212],"Our":[213],"evaluation,":[214],"conducted":[215],"on":[216],"SQLite,":[217],"MySQL,":[218],"PostgreSQL,":[219],"TiDB,":[221],"demonstrates":[222],"significantly":[225],"accelerates":[226],"discovery":[228],"compared":[229],"other":[231],"approaches,":[233],"reducing":[234],"time":[236],"by":[237],"approximately":[238],"60%.":[239]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2025-10-10T00:00:00"}