Systematic performance, and Security evaluation of .NET models for accessing database

Atta Ullah, Muhammad Usman, Muhammad F. Abrar, Najeeb Ullah, Ibrar A. Shah, Muhammad F. Nadeem


In .NET, Object Relational Mapping (ORM) is a programming technique used for accessing the database, which has many frameworks, like Entity Framework, LINQ to SQL, NHibernate, Tele rick Open Access, Light Speed. The LINQ to SQL and Entity Framework usability has increased. This is because of the reason that in these two frameworks full CRUD (Create, Read, Update and Delete) operations can be implemented in short time as compared to Transact Queries, which require more time. In case of multiple projects on various models; Transact Query, LINQ to SQL, and Entity Framework, it becomes difficult to decide which model is the best in terms of performance and security. Therefore, in this article, we provide a comprehensive comparison between Entity Framework, LINQ to SQL and Transact Queries in terms of performance and security. For this purpose, we implemented eleven different types of queries on the selected three frameworks. Subsequently, we quantified and evaluated the execution time and memory usage of all the queries. Furthermore, all types of SQL injection attacks have been applied on three separate applications for security evaluation. Our results show that, the Transact Query is more vulnerable to SQL injection attacks as compared to LINQ to SQL and Entity Framework. Our results show that Transact Query outperforms in terms of memory and CPU usage.  Our results also help the practitioner in adopting a framework on the basis of query level performance in terms of memory and CPU usage.

Full Text:



Dick, J.R., Kent, K. B. And Libby, J.C (2008) A Quantitative analysis of the .NET common language runtime. Journal of Systems Architecture, 554:679-696

M. H. Lutz and P. A. Laplante (2003) C# and the .NET framework: ready for real time. IEEE Software, vol. 20, no. 1, pp. 74-80, doi: 10.1109/MS.1159034

J. Richter (2000) Microsoft .NET Framework Delivers the Platform an Integrated Service-Oriented Web. MSDN Magazine

ROSS MISTRY. Stacia Misner (2014) Introducing Microsoft SQL Server 2014. Washington, Microsoft Press

Dr V.Sivakumar, T.Balachander, Logu, Ramu Jannali (2021) Object Relational Mapping Framework Performance Impact. Turkish Journal of Computer and Mathematics Education, Vol.12 No.7, Pages 2516-2619

Václav Kaczmarczyk, Zdeněk Bradáč, Jakub Arm, Ondřej Baštán, Zuzana Kaczmarczyková (2019) A Simple and effective ADO.NET-based ORM layer. IFAC-PapersOnLine, Volume 52, Pages 228-234, ISSN 2405-8963

Abdulkadir Karachi (2009) Performance Comparison of Managed C# and Delphi Prism in Visual Studio and Unmanaged Delphi and C++ Builder Languages. Journal of Computer Applications, Volume 26-No.1

Yener, Oguz, Tugce and Adil (2015) Performance Comparison of PHP-ASP Web Applications via Database Queries. In Proceeding of the International Conference on Engineering & MIS, 1-3. 10.1145/2832987.2833054

Atul Mishra (2014) Critical Comparison of PHP and ASP.NET for Web Development. International Journal of Science & Technology Researh, Volume 7

Natela & Merab (2012) Reforming the Trees C# and F# Comparison. IV International Conference of “Problems of Cybernetics and Informatics” (PCI’2012).

Li, Yishan & Manoharan, Sathiamoorthy (2013) A performance comparison of SQL and NoSQL databases. In Proc. 15-19th IEEE Pacific Rim Conference on Communications, Computers, and Signal Processing, 10.1109/PACRIM. 6625441

Laaziri, Majida & Benmoussa, Khaoula & Khoulji, Samira & Larbi, Kerkeb &Yamami, Abir (2019). A comparative study of Laravel and symfony PHP frameworks. International Journal of Electrical and Computer Engineering, 9. 704-712.10.11591 /ijece.v9i1. pp 704 712.



  • There are currently no refbacks.

Creative Commons License
This work is licensed under a Creative Commons Attribution 3.0 License.