IDUG EMEA 2026

Based on the VECTOR data type, that came with Db2 12.1, your data can easily be put in definnable context by using similarities. This can help identifying correlations where exact values would make it too complicated. As a relational model typically is based on direct comparability of values only, vector usage can provide some extra level of data linking. With an example shown in a live demo, this session will show step by step, how to implement vector usage in your data to provide additional analytical features.

AI agents are transforming enterprise applications, but they need access to trusted, business-critical mainframe data. This session shows how MCP servers enable agents to query up-to-date, replicated Db2 z/OS data from targets like Db2 LUW or watsonx.data. It covers the rationale for agent integration, architecture patterns, implementation steps, and a live demo of an agent working with z/OS data.

SQL injection remains one of the most damaging classes of flaws against data-driven applications—and the workflow around it has changed: security testers and attackers alike can pair classic tooling with generative AI to iterate payloads faster, interpret ambiguous responses, and explore injection chains with less manual trial and error. This session focuses on Db2-backed applications: how SQL injection manifests in practice, how to recognize fragile dynamic SQL and unsafe integration patterns, and how to prioritize prevention (parameterization, safe composition, and tight error handling). We will connect that baseline to today’s landscape—examples include AI-assisted DAST/exploration tools, AI-augmented automation around sqlmap, and red-team harnesses that probe whether LLM-driven apps avoid unsafe database access—so you leave with a clearer understanding of both defenses and new risks.This is an upgraded version of my session on IDUG EMEA 2022: SQL Injection and Db2 - Pathology and P