一个基于J2EE的税务系统框架

电子税务要求税务部门将执行事务性工作的环境网络化、信息化，需要集成目前税务部门已存在的一些异质应用系统，面对这样的环境和需求，新的税务系统必须基于Web提供服务，能够跨平台运行、可重用、可扩展，同时要求能与现有系统协同工作。基于此需求文中给出了一种基于J2EE的税务系统框架和其实现。在该框架里采用XML，和ⅡOP多种协议来进行数据交换，可方便地将现有异质系统集成进来。     

Converting relational database into XML documents with DOM

The revolution of XML is recognized as the trend of technology on the Internet to researchers as well as practitioners. Companies need to adopt XML technology. With investment in the current relational database systems, they want to develop new XML documents while running existing relational databases on production. They need to reengineer the relational databases into XML documents with constraints preservation. In the process, schema translation must be done before data conversion. Since the existing relational databases are usually normalized, they have to be reconstructed into XML document tree structures. This can be accomplished through denormalization by joining the normalized relations into tables according to their data dependencies constraints. The joined tables are mapped into DOMs, which are then integrated into XML document trees. The user specifies an XML document root with its relevant nodes to form a partitioned XML document tree to meet their requirements. The selected XML document tree is mapped into an XML schema in the form of DTD. We then load joined tables into DOMs, integrate them into a DOM, and transform it into an XML document.     

基于直方图的并行结构连接算法

连接操作是最昂贵且常用的数据库操作．在传统数据库系统中，主要的连接操作是等值连接操作，因此，传统的并行连接算法主要集中于并行等值连接操作．另外，随着XML在Web应用中变得越来越重要，XML已经成为Internet上一种新的数据交换标准．对XML数据的连接操作不同于传统数据库中的等值连接操作，它属于结构连接操作．以前适合等值连接操作的并行连接算法并不能有效地解决结构连接问题．因此，第1次提出了并行结构连接问题，并且通过应用直方图的思想于并行连接中，从而提出两种基本的并行XML结构连接算法、等高直方图连接算法和等宽直方图连接算法．实验表明这两种算法具有较好的性能．     

基于XML的Web异种数据库操作模型的研究

互连网的迅速发展使得Web数据库成为数据库应用的主流,随着网上数据量的增加,越来越多的应用迫切需要通过网络来交换数据。然而,目前的Web数据库实现技术与数据库在设计结构和平台上的差异给数据库的网络操作带来了实现上的困难,同时数据库操作的网络开放会带来诸多安全隐患。基于此,该文提出了一种基于XML的Web异种数据库操作模型,设计了请求和结果XML文档的一般结构(DTD),讨论了该模型在确保数据库安全的条件下,完成异种数据库在Web上的数据交换和共享的工作过程。     

Secure access policy for efficient resource in mobile computing environment

As the Internet was activated and the mobile environment developed, it has become more common to access dynamic XML data regardless of location and time. XML is widely used for information exchange and representation of data for databases, applications, etc., using the advantage to describe information. As a result, large-capacity XML data becomes increasingly complex, and demand for data access policies is increasing. Security issues such as authorization of access to resources, authentication, security enhancement and privacy arise. The mobile computing environment differs from existing information systems in several ways, so it is difficult to apply the existing access control as it is. Therefore, this paper proposes a secure access policy method for query processing to enable efficient resource management in dynamic XML data environment. The results of the evaluation are also presented to show that the additionally proposed method is efficient and excellent.     

XML data stores: emerging practices

We survey emerging native XML storage approaches and identify and highlight popular implementations tailored to XML's "nature" and syntax. By understanding the storage practices of emerging native XML environments, programmers and software designers can better exploit the technology's scalability and reliability benefits. It is because XML is rapidly becoming the Internet standard for data representation and exchange, efficient XML document storage has become a core data management issue. Most early XML storage practices rely on conventional database management systems. However, such systems involve mappings and transformations between XML and the underlying database structure. More recent efforts are based on specific XML-tailored systems that provide ad hoc functionalities. This overview of emerging XML storage approaches highlights current practices along with prospective research and implementation trends.     

基于XML的信息检索技术

传统的信息检索方法无法为用户准确地提供所需的资料,这主要是由于传统的HTML网页结构上的缺陷造成的。文中通过比较HTML文档和XML文档在结构和语义上的差异,阐述了XML文档在信息检索技术中的优势和XML文档必将成为新一代网页模式的趋势。目前已经有很多权威编程工具和数据库支持从XML文档中抽取信息,越来越多的软件提供XML接口,文中以Microsoft公司的.NETFramework为例,介绍了如何从XML文档中检索信息。试验证明基于XML的信息检索技术较好地解决了Internet上资料获取的困难。     

保持数据约束的关系数据库至XML文档的转换

XML已成为Internet上的技术趋势,在保留原有关系数据库的同时发展XML文档是目前的最佳选择,它需要在保持数据依赖约束基础上实现关系数据库与XML文档的转换.这一过程中,模式转换必须先于数据转换,因为现有的关系数据库通常是规范化的,重建XML文档树结构才能实现这一转换.为了达成此目的,首先依据已有的数据依赖约束将规范化的关系联合进一组表格,实现反向规范化,然后将这些联合表格映射为一组DOM,归并成XML文档树,根据用户选择的根结点,以及与它相连的结点形成一个期望的局部文档树,被选的XML文档树又映射为DTD格式的XML模式.这样就可以将联合表映射成一组DOM,并将其归并成单一DOM,最终转换成XML文档.     

纯XML数据库研究综述

虽然XML是一种专门为Internet所设计的标记语言,但是它已经成为Internet上数据表示和数据交换的标准。如何对XML文档进行有效管理与快速查询是当前学术界的研究热点,即所谓的XML数据库。主要对当前XML数据库的研究现状与发展趋势进行全面的论述与分析,并对其中尚未解决的挑战性问题进行了客观的评价与分析。     

Breathing life into legacy

The Internet makes it imperative to unlock legacy data. Three technologies may let companies dust off legacy code and make it work with the Web: Extensible Markup Language, or XML, describes data through the use of tags, eliminating the need to conform to a specific programming infrastructure; Web services let companies wrap software and tailor its distribution, allowing innovative code configurations; and wireless technology offers the ability to get legacy content to mobile workers and clients. Each technology is part of the new arsenal for leveraging existing applications and data, perhaps realizing the elusive goal of anywhere, anytime services     

Black-box detection of XQuery injection and parameter tampering vulnerabilities in web applications

As web applications become the most popular way to deliver essential services to customers, they also become attractive targets for attackers. The attackers craft injection attacks in database-driven applications through the user-input fields intended for interacting with the applications. Even though precautionary measures such as user-input sanitization is employed at the client side of the application, the attackers can disable the JavaScript at client side and still inject attacks through HTTP parameters. The injected parameters result in attacks due to improper server-side validation of user input. The injected parameters may either contain malicious SQL/XML commands leading to SQL/XPath/XQuery injection or be invalid input that intend to violate the expected behavior of the web application. The former is known as an injection attack, while the latter is called a parameter tampering attack. While SQL injection has been intensively examined by the research community, limited work has been done so far for identifying XML injection and parameter tampering vulnerabilities. Database-driven web applications today rely on XML databases, as XML has gained rapid acceptance due to the fact that it favors integration of data with other applications and handles diverse information. Hence, this work proposes a black-box fuzzing approach to detect XQuery injection and parameter tampering vulnerabilities in web applications driven by native XML databases. A prototype XiParam is developed and tested on vulnerable applications developed with a native XML database, BaseX, as the backend. The experimental evaluation clearly demonstrates that the prototype is effective against detection of both XQuery injection and parameter tampering vulnerabilities.     

消除XML键数据冗余的相关规则

XML数据已经成为Internet上的主流数据,但目前大部分XML规范化理论局限在层次的冗余上,从数据库的角度出发,以XML键为中心结合函数依赖FD和多值依赖MVD描述XML数据间的约束;基于主键、副键分析不同情况下的数据冗余,给出相应的规范化规则,得到消除数据冗余的XML模式。     

基于XML的企业工作流系统互操作的实现

企业工作流系统具有广泛的应用价值，但目前其应用主要局限于企业内部。随着Internet和电子商务的发展，企业工作流系统能够协同操作是工作流系统的发展趋势。XML作为可扩展性标准语言，为可重用文档提供了标准的描述机制，必然成为各种应用系统交换数据的标准．并且它也适于描述企业业务流程。文中提出利用XML描述工作流信息，使不同的企业工作流系统通过解析XML来共享工作流信息，从而实现工作流系统的互操作。     

网络题库系统设计中的XML应用

随着网络教育的发展,为各课程建设题库就变得很重要。题库要适用面广,就必须考虑两个问题:一是题库表项的设计要通用;二是题库可以适合各种应用平台,不同的题库之间可以实现方便的数据交换。本文就从数据岛的使用以及通过XML备份数据的方式实现数据交换这两点就第二个问题进行讨论。     

A model-driven approach to semi-structured database design

Recently XML has become a standard for data representation and the preferred method of encoding structured data for exchange over the Internet. Moreover it is frequently used as a logical format to store structured and semi-structured data in databases. We propose a model-driven and configurable approach for modeling hierarchical XML data using object role modeling (ORM) as a flat conceptual model. First a non-hierarchical conceptual schema of the problem domain is built using ORM and then different hierarchical views of the conceptual schema or parts of it are specified by the designer using transformation rules. A hierarchical modeling notation called H-ORM is proposed to show these hierarchical views and model more complex semi-structured data constructs and constraints. We also propose an algorithm to map hierarchical H-ORM views to XML schema language.     

基于XML的异构数据库间信息安全交换

随着Internet和Intranet技术的迅速发展和网络计算模式的广泛应用,异构系统间的信息交换变得日益频繁和重要。论文在对现有异构数据库间信息交换方法进行系统分析的基础上,提出了基于XML模板映射和数字签名技术在异构数据库之间进行安全信息交换的高效方法。通过XML文档和数据库模式之间的模板映射,较好地实现了异构数据库之间的透明互操作;利用加密和数据签名技术保证了重要数据的安全性和不可抵赖性。     

Translating relational schema into XML schema definition with data semantic preservation and XSD graph

Many legacy systems have been created by using relational database operating not for the Internet expression. Since the relational database is not an efficient way for data explosion, electronic transfer of data, and electronic business on the Web, we introduce a methodology in which a relational schema will be translated to an Extensible Markup Language (XML) schema definition for creating an XML database that is a simple and efficient format on the Web. We apply the Indirect Schema Translation Method that is a semantic-based methodology in this project. The mechanism is that the Relational Schema will be translated into the conceptual model, an Extended Entity Relationship (EER) Model using Reverse Engineering. Afterward, the EER model will be mapped to an XML Schema Definition Language (XSD) Graph as an XML conceptual schema using Semantic Transformation. Finally, the XSD Graph will be mapped into the XSD as an XML logical schema in the process of Forward Engineering, and the data semantics of participation, cardinality, generalization, aggregation, categorization, N-ary and U-ary relationship are preserved in the translated XML schema definition.     

基于RDBMS的XML数据存储技术

XML已成为互联网事实上的数据表示标准,在数据交换和数据仓库中广泛应用.但XML文件特征不能保障数据的安全性和并发访问,而RDBMS严谨的关系理论和技术的成熟性可以弥补XML技术的不足.结合XML与RDBMS的优点,提出一个基于RDBMS的XML数据存取方案,用于简化XML数据的管理和数据仓库的构建.利用Oracle ...