IDUG EMEA 2026

This presentation will provide the ongoing success story Db2 z/OS Version 13 and covers the latest experiences with Db2 13 at Commerzbank AG. It will talk about some key important areas which are essential for the success and how to prevent some known avoidable pitfalls. We share the important latest experiences of the last 12 months, explains the upcoming and validated best practices in several key areas. This session will also dive into Function Level dependencies, maintenance aspects, some tooling dependencies, and some performance aspects as well as base utilities and system functionalities.

Data lakes have become a foundational component of modern data platforms, enabling organizations to store and process large volumes of structured, semi-structured, and unstructured data with high scalability and flexibility.
For data architects and database administrators, the challenge lies not only in designing a robust data lake architecture but also in ensuring consistent performance, governance, and operational reliability across diverse workloads.
A well-designed data lake architecture typically follows a layered approach, incorporating ingestion, storage, processing, metadata management, and access layers.
Data is ingested through batch processing and streaming pipelines into cost-effective, distributed storage systems, based on object storage.
Processing frameworks support transformation and enrichment, while metadata and catalog services provide schema management, lineage, and discoverability. Increasingly, modern architectures adopt lakehouse patterns to bridge the gap betwe

Db2 for z/OS offers advanced capabilities to strengthen security management in distributed environments. This session discusses best practices for establishing secure connections including protected ID authentication using SSL, IDT, or trusted connection. This session also reviews the key system parameters that govern distributed access and discusses how system profile tables can be leveraged to enforce granular connection controls and secure TCP/IP connectivity.

SQL injection remains one of the most damaging classes of flaws against data-driven applications—and the workflow around it has changed: security testers and attackers alike can pair classic tooling with generative AI to iterate payloads faster, interpret ambiguous responses, and explore injection chains with less manual trial and error. This session focuses on Db2-backed applications: how SQL injection manifests in practice, how to recognize fragile dynamic SQL and unsafe integration patterns, and how to prioritize prevention (parameterization, safe composition, and tight error handling). We will connect that baseline to today’s landscape—examples include AI-assisted DAST/exploration tools, AI-augmented automation around sqlmap, and red-team harnesses that probe whether LLM-driven apps avoid unsafe database access—so you leave with a clearer understanding of both defenses and new risks.This is an upgraded version of my session on IDUG EMEA 2022: SQL Injection and Db2 - Pathology and P