Automated reverse engineering of role-based access control policies of web applications

• Main Authors: LE, Ha Thanh, SHAR, Lwin Khin, BIANCULLI, Domenico, BRIAND, Lionel C., NGUYEN, Cu Duy
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2022
• Subjects: Access control testing; Reverse engineering; Access control policies; Machine learning; Information Security; Software Engineering
• Online Access: https://ink.library.smu.edu.sg/sis_research/6407; https://ink.library.smu.edu.sg/context/sis_research/article/7410/viewcontent/main.pdf
• Institution: Singapore Management University

Access control (AC) is an important security mechanism used in software systems to restrict access to sensitive resources. Therefore, it is essential to validate the correctness of AC implementations with respect to policy specifications or intended access rights. However, in practice, AC policy spe...