SQL statement checking method and device

Abstract

The invention provides an SQL statement checking method and device, which can be used in the financial field or other fields. The method comprises the following steps: performing statement extraction on an obtained application log file to obtain text data; obtaining data information according to the text statement and the incoming parameter, and inputting the data information corresponding to the text statement into a pre-established prediction model to obtain a statement prediction result corresponding to the text statement; if the statement prediction result is an SQL statement, generating a complete SQL statement according to the text statement and the incoming parameter; and obtaining a corresponding execution plan result, and generating a statement check result according to the statement prediction result and the execution plan result corresponding to the complete SQL statement. The application log file is analyzed to obtain the text statement, the text statement is predicted in combination with the prediction model and the execution plan result, the hidden danger of full-table scanning is reduced, meanwhile, the configuration dependence of static code scanning is eliminated, and compared with dynamic monitoring, the method is more targeted, and the false alarm rate is reduced.

Description

technical field [0001] The invention relates to the technical field of SQL checking, in particular to a method and device for checking SQL statements. Background technique [0002] A database management system is a large-scale software for manipulating and managing databases, which is essential in any platform and system. The data manipulation language DML (Data Manipulation Language) it provides allows users to add, delete, check, and modify data. Especially in distributed systems and large-scale applications, the amount of data is large, there are many tables involved, and the operation of data is more frequent and the logic is complex. Therefore, the requirements for writing sql statements for data operations are higher. Different sql statements consume more The time may vary greatly. Executing sql leads to full table scan is also one of the reasons for the timeout and downtime encountered at present, so it is extremely important to retrieve the sql that does not match th...

AI Technical Summary

Problems solved by technology

[0003] At present, there are static code scanning and dynamic monitoring systems for sql inspection methods that cannot match the index. Static code scanning is not very adaptable to the diversity of sql statements and parameters. False positives, tables with a small amount of data cannot be accurately located in the test environment

Images