IDUG EMEA 2026

AI agents are transforming enterprise applications, but they need access to trusted, business-critical mainframe data. This session shows how MCP servers enable agents to query up-to-date, replicated Db2 z/OS data from targets like Db2 LUW or watsonx.data. It covers the rationale for agent integration, architecture patterns, implementation steps, and a live demo of an agent working with z/OS data.

There have been so many enhancements in Db2 SQL for developers in the last 3 or 4 versions that many developers have never really taken advantage of. This presentation picks my personal favorites that I believe all developers should get knowledgeable on and possibly applied to current and future applications. Developers should be informed of all of newer features in Db2 and this presentation is a great summary for this topic. When it comes to performance, often times the answer to better performance is rewriting queries different ways, and redesigning programs differently. Attendees will leave with a better understanding of some great SQL enhancements, application table designs, along with getting stronger in the SQL language. This is a great session for developers on Db2 LUW or Db2 z/OS. Developers 'Get Empowered'.

SQL injection remains one of the most damaging classes of flaws against data-driven applications—and the workflow around it has changed: security testers and attackers alike can pair classic tooling with generative AI to iterate payloads faster, interpret ambiguous responses, and explore injection chains with less manual trial and error. This session focuses on Db2-backed applications: how SQL injection manifests in practice, how to recognize fragile dynamic SQL and unsafe integration patterns, and how to prioritize prevention (parameterization, safe composition, and tight error handling). We will connect that baseline to today’s landscape—examples include AI-assisted DAST/exploration tools, AI-augmented automation around sqlmap, and red-team harnesses that probe whether LLM-driven apps avoid unsafe database access—so you leave with a clearer understanding of both defenses and new risks.This is an upgraded version of my session on IDUG EMEA 2022: SQL Injection and Db2 - Pathology and P