Security Problem Modeling of Database Connection Pool
Bao Hua Huang, Tian Jing Wang, Yan Ma, Feng Xian Jiang · Applied Mechanics and Materials · 2014
Connection pool is widely used in 3 tiers Web system based on database. It can improve performance of the Web system, but brings security problem to the system at the same time. The formal model of 3 tiers Web system is proposed, and the root of security problem, absence of subject transmission from Web application to database management system, is found from the model. In addition, several methods to solve the security problem faced by database connection pool in 3 tiers Web system are introduced or proposed.