{"meta":{"page":1,"per_page":50,"max_per_page":100,"total":148,"total_is_capped":false,"direct_labels_cover":0,"predictions_cover":148,"direct_label_status":"direct model label, unvalidated","prediction_status":"machine_predicted_unvalidated (Codex and Gemma teacher distillation)","score_status":"score_only:v0-immature-baseline (scores rank; they never assert a category)","snapshot":{"source":"OpenAlex, pinned release, all 482 partitions","release":"2026-06-24","frame_built":"2026-07-12","author_layer_release":"2026-06-26"},"query_hash":"f745dfd66c4f","filters":{"topic":"Web Application Security Vulnerabilities"}},"results":[{"id":"W2133723082","doi":"10.1145/2382196.2382238","title":"The devil is in the (implementation) details","year":2012,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":198,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false},"ca_institutions":"University of British Columbia","funders":"Natural Sciences and Engineering Research Council of Canada","keywords":"Login; Single sign-on; Computer science; Computer security; Implementation; World Wide Web; Internet privacy; Web application; Service provider; Protocol (science); Authentication (law); Web service; Simplicity; Web application security; Service (business); Web development; Software engineering","authors":[{"name":"San-Tsai Sun","is_ca":true},{"name":"Konstantin Beznosov","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.02702643875597453,"gpt":0.3193447649780471,"spread":0.2923183262220725,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.004570314,0.0007566527,0.0005113849,0.001132335,0.001414961,0.003847163,0.002662397,0.002759784,0.2153481],"category_scores_gemma":[0.0216272,0.0008150673,0.0007665451,0.0007812767,0.001368218,0.004354817,0.004111952,0.002837153,0.1672944],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001490242,"about_ca_system_score_gemma":0.003417641,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0009916003,"about_ca_topic_score_gemma":0.001427129,"domain_scores_codex":[0.9945374,0.001248082,0.0004773656,0.0007646646,0.002392124,0.0005802982],"domain_scores_gemma":[0.9864317,0.00166619,0.0006803022,0.006490254,0.003982261,0.0007494151],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"not_applicable","study_design_scores_codex":[0.0003827246,0.0005735238,0.008588828,0.001350024,0.00007448528,0.001200008,0.001646488,0.001843596,0.02172271,0.1643952,0.3751753,0.4230471],"study_design_scores_gemma":[0.00004907143,0.0001437671,0.0008287291,0.0001943439,0.00002124926,0.0007120863,0.0002183603,0.001788243,0.008986458,0.007070979,0.979947,0.00003985593],"study_design_candidate":"not_applicable","study_design_consensus":null,"genre_codex":"other","genre_gemma":"commentary","genre_scores_codex":[0.02403676,0.001340656,0.3434072,0.02198294,0.01200095,0.004095456,0.01005587,0.02862982,0.5544504],"genre_scores_gemma":[0.2004197,0.00162124,0.2316753,0.01247393,0.001657585,0.004517348,0.01132253,0.008038278,0.5282742],"genre_candidate":"commentary","genre_consensus":null,"teacher_disagreement_score":0.2153481,"threshold_uncertainty_score":0.7204111,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2017035494","doi":"10.1145/2491411.2491456","title":"Z3-str: a z3-based string solver for web application analysis","year":2013,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":195,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"University of Waterloo","funders":"","keywords":"String (physics); Computer science; String metric; Solver; String searching algorithm; Theoretical computer science; Programming language; Symbolic execution; Concatenation (mathematics); Plug-in; Approximate string matching; Mathematics; Data structure; Physics; Combinatorics; Theoretical physics; Pattern matching","authors":[{"name":"Yunhui Zheng","is_ca":false},{"name":"Xiangyu Zhang","is_ca":false},{"name":"Vijay Ganesh","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.01062013889141894,"gpt":0.243209372700715,"spread":0.2325892338092961,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001370301,0.001529714,0.0007253534,0.001993071,0.0007573972,0.002163394,0.002768612,0.001305997,0.01714184],"category_scores_gemma":[0.005829818,0.0007544635,0.002172257,0.001705288,0.001085833,0.003092357,0.00282933,0.001883577,0.004628547],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00115246,"about_ca_system_score_gemma":0.003264494,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00514759,"about_ca_topic_score_gemma":0.008736666,"domain_scores_codex":[0.998487,0.0002993312,0.0001820094,0.0002380784,0.0006318601,0.000161794],"domain_scores_gemma":[0.9979218,0.00110924,0.0002192915,0.0002877644,0.0004048518,0.00005713986],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"not_applicable","study_design_scores_codex":[0.0006983539,0.0002935032,0.007988568,0.001567463,0.0003595884,0.001116244,0.0004772649,0.167922,0.0261911,0.2375933,0.07717421,0.4786185],"study_design_scores_gemma":[0.0001432689,0.00006383989,0.000456132,0.00008977182,0.00007045659,0.0004003425,0.0000964958,0.8410048,0.02868811,0.0768533,0.0520827,0.00005065625],"study_design_candidate":"not_applicable","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"software","genre_scores_codex":[0.005549108,0.0001183389,0.9554532,0.0002085556,0.00007789484,0.0001424251,0.001140273,0.03182073,0.005489464],"genre_scores_gemma":[0.0821996,0.0002956003,0.9014837,0.0003734283,0.00005614279,0.0003149336,0.003552788,0.004985763,0.006738067],"genre_candidate":"software","genre_consensus":null,"teacher_disagreement_score":0.01714184,"threshold_uncertainty_score":0.05734521,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2048899404","doi":"10.1145/2187671.2187673","title":"Mitigating program security vulnerabilities","year":2012,"lang":"en","type":"review","venue":"ACM Computing Surveys","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":129,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"Queen's University","funders":"","keywords":"Computer science; Secure coding; Vulnerability management; Vulnerability (computing); Computer security; Security bug; Software deployment; Vulnerability assessment; Security testing; Variety (cybernetics); Software security assurance; Risk analysis (engineering); Damages; Key (lock); Security information and event management; Security service; Information security; Cloud computing security; Software engineering; Business","authors":[{"name":"Hossain Shahriar","is_ca":true},{"name":"Mohammad Zulkernine","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.08518590885983726,"gpt":0.3652950161445279,"spread":0.2801091072846906,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.002010875,0.001147364,0.0007231413,0.005328833,0.0007241878,0.001691514,0.001543255,0.00140088,0.003139651],"category_scores_gemma":[0.00672873,0.0004356725,0.0007278315,0.002565576,0.001008453,0.003479311,0.001727456,0.00165291,0.00186928],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00102001,"about_ca_system_score_gemma":0.003116626,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.001978804,"about_ca_topic_score_gemma":0.002196784,"domain_scores_codex":[0.997515,0.0004024319,0.0001104959,0.0002487577,0.001466813,0.0002565586],"domain_scores_gemma":[0.9946706,0.002822647,0.0006152299,0.0004128499,0.001351192,0.0001274856],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"not_applicable","study_design_scores_codex":[0.00001735084,0.0001156468,0.002151948,0.003022446,0.00006340259,0.0001606271,0.0004016691,0.001416457,0.004614668,0.01786154,0.01413084,0.9560434],"study_design_scores_gemma":[0.00002763534,0.0003659572,0.01009119,0.009007894,0.0003813984,0.005457466,0.001728924,0.008073434,0.02856799,0.0416948,0.8945146,0.00008863192],"study_design_candidate":"not_applicable","study_design_consensus":null,"genre_codex":"review","genre_gemma":"review","genre_scores_codex":[0.0354383,0.7606065,0.105436,0.01031792,0.0009946461,0.0003796898,0.0002217113,0.002208047,0.084397],"genre_scores_gemma":[0.1995591,0.7097427,0.0673929,0.002288083,0.0006806835,0.0003273982,0.0006174706,0.0003416605,0.01904994],"genre_candidate":"review","genre_consensus":"review","teacher_disagreement_score":0.005328833,"threshold_uncertainty_score":0.01063466,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2127229466","doi":"10.5555/2337223.2337257","title":"Automated repair of HTML generation errors in PHP applications using string constraint solving","year":2012,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":97,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"McGill University","funders":"","keywords":"Computer science; Plug-in; String (physics); Programming language; Constraint (computer-aided design); Test suite; HTML element; Suite; Constant (computer programming); Web application; Information retrieval; Web page; Software engineering; Test case; World Wide Web; Mathematics; Machine learning","authors":[{"name":"Hesam Samimi","is_ca":false},{"name":"Max Schäfer","is_ca":false},{"name":"Shay Artzi","is_ca":false},{"name":"Todd Millstein","is_ca":false},{"name":"Frank Tip","is_ca":false},{"name":"Laurie Hendren","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.05199819808543812,"gpt":0.3071029673659547,"spread":0.2551047692805166,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.002064341,0.001022726,0.0004969974,0.0009389924,0.0006832887,0.0009440859,0.001476681,0.00112318,0.004278546],"category_scores_gemma":[0.01242683,0.0004929216,0.0006721427,0.0008383883,0.000862487,0.00109099,0.001340643,0.001246311,0.001015416],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0006448572,"about_ca_system_score_gemma":0.001442755,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.003366534,"about_ca_topic_score_gemma":0.002364619,"domain_scores_codex":[0.9980764,0.0005788347,0.0001875484,0.0003701708,0.0006046176,0.0001823364],"domain_scores_gemma":[0.9889634,0.007553125,0.0009423007,0.001448202,0.0009687913,0.0001241593],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.000688888,0.000834618,0.01916294,0.001054767,0.0001618915,0.002645225,0.001007757,0.2898516,0.09802682,0.01445957,0.02260712,0.5494988],"study_design_scores_gemma":[0.0001185164,0.0001463322,0.002242976,0.000071879,0.00005279776,0.0007339206,0.0001431079,0.8191918,0.1588968,0.008580979,0.00977005,0.00005080087],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.1387259,0.0001522552,0.799338,0.0005562879,0.00006657388,0.0003653358,0.001015748,0.05520378,0.004576048],"genre_scores_gemma":[0.4379409,0.0001125376,0.5553204,0.0001598009,0.00002083548,0.0001654387,0.001482808,0.002699253,0.002098036],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.004278546,"threshold_uncertainty_score":0.01431316,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2767683523","doi":"10.23919/fmcad.2017.8102241","title":"Z3str3: A String Solver with Theory-aware Heuristics","year":2017,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":96,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"University of Waterloo","funders":"","keywords":"DPLL algorithm; Computer science; Heuristics; Theoretical computer science; Solver; Heuristic; Predicate abstraction; Branching (polymer chemistry); Algorithm; Discrete mathematics; Mathematics; Programming language; Model checking; Artificial intelligence","authors":[{"name":"Murphy Berzish","is_ca":true},{"name":"Vijay Ganesh","is_ca":true},{"name":"Yunhui Zheng","is_ca":false}],"retraction":null,"screen_n_in":null,"score":{"opus":0.01630989012560282,"gpt":0.2551499276010801,"spread":0.2388400374754773,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001026871,0.0013541,0.0006348205,0.001388021,0.0006096974,0.002175485,0.003362538,0.001407842,0.02096387],"category_scores_gemma":[0.004670206,0.0007800329,0.001805137,0.002357112,0.001122571,0.002720281,0.002501979,0.002307192,0.004734464],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00150751,"about_ca_system_score_gemma":0.004078936,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.005130997,"about_ca_topic_score_gemma":0.01221058,"domain_scores_codex":[0.9985582,0.0003069065,0.0001167457,0.0002475545,0.0005925863,0.0001779786],"domain_scores_gemma":[0.9982547,0.0009540334,0.0001448891,0.0003447003,0.0002457844,0.00005588529],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"bench_or_experimental","study_design_scores_codex":[0.0007131278,0.0003200331,0.00235798,0.001535911,0.0002423958,0.0005376532,0.0002335764,0.1914309,0.0207218,0.1420355,0.09816556,0.5417056],"study_design_scores_gemma":[0.0004422937,0.0001545012,0.0003201452,0.0001043075,0.00008982819,0.000308382,0.0001187976,0.8431903,0.02431285,0.06969383,0.061213,0.00005171206],"study_design_candidate":"bench_or_experimental","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.01854669,0.0004923484,0.9021174,0.0009781941,0.0002900684,0.0002958557,0.002990115,0.0454561,0.0288333],"genre_scores_gemma":[0.1255622,0.0003756835,0.8539786,0.000805289,0.00008164425,0.0003086847,0.00516677,0.004732084,0.008988952],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.02096387,"threshold_uncertainty_score":0.07013118,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2048297044","doi":"10.1109/issre.2011.28","title":"JavaScript Errors in the Wild: An Empirical Study","year":2011,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":68,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"University of British Columbia","funders":"","keywords":"JavaScript; Unobtrusive JavaScript; Computer science; Web application; Empirical research; Code (set theory); Rich Internet application; Programming language; World Wide Web","authors":[{"name":"Frolin S. Ocariza","is_ca":true},{"name":"Karthik Pattabiraman","is_ca":true},{"name":"Benjamin G. Zorn","is_ca":false}],"retraction":null,"screen_n_in":null,"score":{"opus":0.09604654733109515,"gpt":0.33102255244868,"spread":0.2349760051175848,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.006828636,0.0004301159,0.0004890365,0.002268128,0.001109337,0.001332664,0.001256392,0.001598253,0.001803278],"category_scores_gemma":[0.07972378,0.0005295688,0.0003809945,0.002483957,0.00196104,0.003433665,0.001223363,0.002326458,0.0009430943],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0007018998,"about_ca_system_score_gemma":0.0006664186,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.003144647,"about_ca_topic_score_gemma":0.004514623,"domain_scores_codex":[0.9910306,0.004014054,0.001023274,0.001114092,0.002335345,0.000482569],"domain_scores_gemma":[0.7052777,0.2109745,0.04531777,0.01296619,0.02197235,0.003491515],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"observational","study_design_gemma":"observational","study_design_scores_codex":[0.0003004287,0.003904388,0.9642879,0.0001666029,0.00008104891,0.001092203,0.008976012,0.0007044785,0.001190174,0.0005005768,0.001705716,0.01709049],"study_design_scores_gemma":[0.0000590485,0.001894178,0.9614905,0.0001664821,0.00009121822,0.002953491,0.01704615,0.008451659,0.002499103,0.0009109715,0.004351296,0.0000858917],"study_design_candidate":"observational","study_design_consensus":"observational","genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.9986795,0.0000643037,0.000373795,0.000104721,0.000003629663,0.00004817544,0.000176342,0.00001523017,0.0005343911],"genre_scores_gemma":[0.9980972,0.0001243325,0.0007348478,0.0001001589,0.00001247503,0.00007174976,0.0003791535,0.00002021813,0.0004597803],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.006828636,"threshold_uncertainty_score":0.03611374,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2101417205","doi":"10.1109/qsic.2008.33","title":"MUSIC: Mutation-based SQL Injection Vulnerability Checking","year":2008,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":67,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false},"ca_institutions":"Queen's University","funders":"Natural Sciences and Engineering Research Council of Canada","keywords":"Computer science; SQL injection; SQL; Secure coding; Web application; Source code; Test case; Java; Programming language; Coding (social sciences); Mutation; Unit testing; Database; Software engineering; Operating system; World Wide Web; Query by Example; Software; Search engine; Machine learning","authors":[{"name":"Hossain Shahriar","is_ca":true},{"name":"Mohammad Zulkernine","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.04054912552352494,"gpt":0.2635980593103109,"spread":0.2230489337867859,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.002023644,0.001015836,0.0007861239,0.002253518,0.0004771368,0.0008311927,0.001932178,0.0009673808,0.001260301],"category_scores_gemma":[0.01026856,0.0003952118,0.0009677007,0.0009311137,0.001323178,0.001799221,0.001243961,0.0007393259,0.0003792952],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0006762507,"about_ca_system_score_gemma":0.001353407,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00182757,"about_ca_topic_score_gemma":0.001483171,"domain_scores_codex":[0.9963806,0.0007638024,0.0003178557,0.0005599725,0.001716891,0.0002608547],"domain_scores_gemma":[0.9937661,0.002984814,0.001070753,0.001117848,0.0009221539,0.0001384187],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.001333047,0.0006517523,0.04565477,0.0008018767,0.0004693709,0.001988424,0.000649265,0.1383581,0.2930224,0.02284635,0.007312334,0.4869124],"study_design_scores_gemma":[0.0001546948,0.0006424751,0.006700429,0.00006584311,0.0001434426,0.001514612,0.00008104705,0.7162556,0.2591258,0.00964917,0.005558544,0.0001083243],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.1767354,0.0002840169,0.7780336,0.0002385371,0.00007245723,0.0003554243,0.000638016,0.04138155,0.002260967],"genre_scores_gemma":[0.6704143,0.0001375092,0.3261043,0.0002192379,0.00003860541,0.0002164697,0.0008896137,0.0007172534,0.001262786],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.002253518,"threshold_uncertainty_score":0.01070213,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2057718232","doi":"10.1145/1455770.1455783","title":"SOMA","year":2008,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":57,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"Carleton University","funders":"","keywords":"Computer science; Server; Cross-site scripting; Soma; Web server; Overhead (engineering); Scripting language; Computer security; Key (lock); World Wide Web; Web application security; Web page; The Internet; Web development; Operating system","authors":[{"name":"Terri Oda","is_ca":true},{"name":"Glenn Wurster","is_ca":true},{"name":"Paul C. van Oorschot","is_ca":true},{"name":"Anil Somayaji","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.0241689332405172,"gpt":0.2214768913384473,"spread":0.1973079580979301,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.002234037,0.0006142154,0.0005636944,0.001171855,0.001193573,0.003864805,0.001643002,0.001457485,0.02497434],"category_scores_gemma":[0.006915899,0.0005501148,0.0005932019,0.0007092151,0.00104523,0.003871126,0.003026567,0.001804453,0.02329857],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001060197,"about_ca_system_score_gemma":0.001824959,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0008079997,"about_ca_topic_score_gemma":0.001170488,"domain_scores_codex":[0.9969447,0.0004993142,0.0002797688,0.0005494392,0.001396798,0.0003300229],"domain_scores_gemma":[0.9923016,0.001194878,0.0007158866,0.003570972,0.001879751,0.0003368696],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"not_applicable","study_design_scores_codex":[0.0009206065,0.0003908619,0.006559502,0.0005544393,0.0000685981,0.0005333672,0.0009080867,0.004784293,0.04166871,0.3314722,0.1326614,0.4794779],"study_design_scores_gemma":[0.0001099966,0.0003501276,0.002072952,0.0001287992,0.0000647541,0.00124223,0.0001352035,0.03113819,0.05992987,0.05039522,0.8543395,0.00009306192],"study_design_candidate":"not_applicable","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"other","genre_scores_codex":[0.03603144,0.0009052765,0.5899943,0.001684233,0.0007755391,0.001053296,0.002167411,0.1009817,0.2664068],"genre_scores_gemma":[0.3612341,0.001474922,0.3454337,0.00308402,0.00046881,0.001179555,0.007169028,0.009249698,0.2707061],"genre_candidate":"other","genre_consensus":null,"teacher_disagreement_score":0.02497434,"threshold_uncertainty_score":0,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2087494106","doi":"10.1145/1858996.1859044","title":"Eliminating navigation errors in web applications via model checking and runtime enforcement of navigation state machines","year":2010,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":57,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"Université du Québec à Chicoutimi","funders":"","keywords":"Computer science; State (computer science); Enforcement; Model checking; Runtime verification; Web application; Embedded system; Real-time computing; Formal verification; Operating system; Programming language","authors":[{"name":"Sylvain Hallé","is_ca":true},{"name":"Taylor Ettema","is_ca":false},{"name":"Chris Bunch","is_ca":false},{"name":"Tevfik Bultan","is_ca":false}],"retraction":null,"screen_n_in":null,"score":{"opus":0.00976300783914658,"gpt":0.2661886500240832,"spread":0.2564256421849366,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.005986949,0.00167907,0.001161538,0.001438735,0.001264669,0.002888437,0.003088339,0.001578011,0.001459048],"category_scores_gemma":[0.02490548,0.001355509,0.002332173,0.0008280133,0.002923908,0.004286608,0.003112954,0.003200158,0.0004863729],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001440583,"about_ca_system_score_gemma":0.006367087,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.009991784,"about_ca_topic_score_gemma":0.0117024,"domain_scores_codex":[0.9900991,0.003847562,0.0007170215,0.001096107,0.003268215,0.0009718987],"domain_scores_gemma":[0.9749416,0.01142014,0.002335659,0.008529833,0.002488387,0.0002842779],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0007857998,0.0009572257,0.01990016,0.0007967351,0.0003397836,0.0009162248,0.001136018,0.6097219,0.08948816,0.05463203,0.005784253,0.2155418],"study_design_scores_gemma":[0.00007230222,0.00009382443,0.0006893887,0.00005455399,0.0001062692,0.000120571,0.00004380135,0.9363602,0.04878484,0.01186252,0.001756647,0.00005501087],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.08096462,0.0001822447,0.8900476,0.000399748,0.00008641506,0.0001391622,0.000134309,0.0264267,0.00161912],"genre_scores_gemma":[0.719257,0.0002408757,0.2760188,0.000208518,0.00006219296,0.0002287098,0.0004675708,0.00177807,0.001738334],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.009991784,"threshold_uncertainty_score":0.03166234,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2153106208","doi":"10.1109/issre.2010.12","title":"Client-Side Detection of Cross-Site Request Forgery Attacks","year":2010,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":56,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false},"ca_institutions":"Queen's University","funders":"Natural Sciences and Engineering Research Council of Canada","keywords":"Computer science; Visibility; Benchmark (surveying); Computer security; Client-side; Test suite; Session (web analytics); Phishing; Focus (optics); Suite; Web page; Matching (statistics); World Wide Web; Test case; The Internet","authors":[{"name":"Hossain Shahriar","is_ca":true},{"name":"Mohammad Zulkernine","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.01397473587728289,"gpt":0.2940833901793756,"spread":0.2801086543020927,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.003119562,0.001301053,0.001141082,0.002169261,0.0004811894,0.001597402,0.001697216,0.00159485,0.001660435],"category_scores_gemma":[0.01942596,0.0006084278,0.0006730459,0.0008183963,0.0007026226,0.00239372,0.002014558,0.00124089,0.00212293],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0007972608,"about_ca_system_score_gemma":0.001483416,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.002292315,"about_ca_topic_score_gemma":0.001497169,"domain_scores_codex":[0.9903779,0.00155078,0.0006863591,0.001083108,0.005585912,0.0007158369],"domain_scores_gemma":[0.977432,0.005719253,0.003090616,0.007937743,0.005155643,0.0006646729],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"bench_or_experimental","study_design_scores_codex":[0.002640732,0.001779479,0.1387756,0.0009014572,0.0003580869,0.004135193,0.001799919,0.03164914,0.2309949,0.007522564,0.02015685,0.5592861],"study_design_scores_gemma":[0.0001082151,0.0006592461,0.03380516,0.00009793324,0.000110607,0.003586338,0.0002466326,0.5673226,0.3816177,0.002318404,0.009983043,0.0001440288],"study_design_candidate":"bench_or_experimental","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"methods","genre_scores_codex":[0.5540408,0.0006832274,0.3058412,0.000346862,0.00008014875,0.0008907193,0.0009121639,0.1265863,0.01061845],"genre_scores_gemma":[0.9452193,0.0001147522,0.0497467,0.0001308679,0.00001794339,0.00009684209,0.0007473788,0.001172308,0.002753829],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.003119562,"threshold_uncertainty_score":0.01649797,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2150898646","doi":"10.1109/iwsess.2009.5068458","title":"MUTEC: Mutation-based testing of Cross Site Scripting","year":2009,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":55,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"Queen's University","funders":"","keywords":"Cross-site scripting; Computer science; JavaScript; Scripting language; Programming language; Set (abstract data type); Test suite; Test script; Test case; Mutation; Web application; Software engineering; Data mining; World Wide Web; Web application security; Web service; Machine learning; Web development","authors":[{"name":"Hossain Shahriar","is_ca":true},{"name":"Mohammad Zulkernine","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.03075641036596555,"gpt":0.2972830597958762,"spread":0.2665266494299107,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001497324,0.0008986334,0.0005456695,0.001270388,0.0003160353,0.0005149313,0.001279917,0.0008532205,0.001504979],"category_scores_gemma":[0.007385071,0.0002379879,0.0006167746,0.0004721629,0.000993034,0.001093451,0.0009580576,0.0005896605,0.0002665943],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0004029008,"about_ca_system_score_gemma":0.000558477,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00121528,"about_ca_topic_score_gemma":0.0007949413,"domain_scores_codex":[0.9978948,0.0005475873,0.000166662,0.0004067758,0.0008147077,0.0001693824],"domain_scores_gemma":[0.9954438,0.002805562,0.0005291909,0.000648531,0.0004637393,0.0001092693],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"bench_or_experimental","study_design_scores_codex":[0.001345937,0.0009263469,0.0308982,0.0006467822,0.0002498038,0.002424968,0.0007163013,0.1418428,0.2968861,0.02008264,0.005893637,0.4980864],"study_design_scores_gemma":[0.0001579068,0.0009555142,0.006556334,0.00007698485,0.0000889197,0.001711898,0.0001167644,0.6441528,0.3299159,0.008865378,0.00731272,0.00008893768],"study_design_candidate":"bench_or_experimental","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.2822778,0.0002013817,0.6863205,0.000201414,0.0000673756,0.0003813887,0.000660777,0.02696472,0.002924746],"genre_scores_gemma":[0.7813179,0.00008975296,0.2149516,0.0001575645,0.00001732775,0.0002712627,0.0008953274,0.0007918149,0.001507483],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.001504979,"threshold_uncertainty_score":0.007918715,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2106620684","doi":"10.1109/cse.2009.372","title":"Threat Modeling for CSRF Attacks","year":2009,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":54,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"Concordia University of Edmonton","funders":"","keywords":"Computer science; Threat model; Vulnerability (computing); Web application security; Computer security; Vulnerability assessment; Vulnerability management; World Wide Web; Web service; Web development","authors":[{"name":"Xiaoli Lin","is_ca":true},{"name":"Pavol Zavarsky","is_ca":true},{"name":"Ron Ruhl","is_ca":true},{"name":"Dale Lindskog","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.03541507962795403,"gpt":0.3001777122192298,"spread":0.2647626325912758,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001835611,0.001023841,0.0006391634,0.001483946,0.0007716354,0.001963305,0.001321485,0.001980448,0.004053664],"category_scores_gemma":[0.005263902,0.0004140745,0.001174281,0.0007015617,0.001042847,0.00302396,0.001329294,0.002077402,0.0009530408],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001652836,"about_ca_system_score_gemma":0.001516617,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.008042339,"about_ca_topic_score_gemma":0.005298791,"domain_scores_codex":[0.9984145,0.0006314658,0.00008239138,0.000171291,0.0004632434,0.0002371267],"domain_scores_gemma":[0.9966716,0.002034362,0.0004486459,0.0002549671,0.0004434924,0.0001469651],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00003967805,0.00005456112,0.0008079396,0.00004701552,0.00002700554,0.0002124677,0.0001756447,0.7990065,0.000791568,0.1886012,0.002239584,0.00799684],"study_design_scores_gemma":[0.000005635524,0.00001300368,0.0001042251,0.000007366179,0.000006496868,0.00005315214,0.00002691444,0.9592511,0.0001071429,0.03883315,0.001583003,0.00000873016],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.05934068,0.0006007694,0.8928849,0.002381063,0.000140205,0.0003050864,0.0008237113,0.0008079126,0.04271562],"genre_scores_gemma":[0.9055319,0.0009245157,0.07676537,0.0003656773,0.0001478365,0.0004182714,0.0006073557,0.0001458199,0.0150932],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.008042339,"threshold_uncertainty_score":0.01599103,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2078389019","doi":"10.1145/2568225.2568257","title":"Vejovis: suggesting fixes for JavaScript faults","year":2014,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":49,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"University of British Columbia","funders":"Intel Corporation","keywords":"JavaScript; Computer science; Unobtrusive JavaScript; Web application; Programming language; Static analysis; Code (set theory); Operating system; Rich Internet application","authors":[{"name":"Frolin S. Ocariza","is_ca":true},{"name":"Karthik Pattabiraman","is_ca":true},{"name":"Ali Mesbah","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.01224989621327986,"gpt":0.2410811845357947,"spread":0.2288312883225148,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.005217625,0.001910401,0.001039361,0.006471628,0.0009694379,0.002083113,0.003477368,0.002649166,0.002266055],"category_scores_gemma":[0.05422863,0.001125181,0.0009025739,0.001393269,0.00102744,0.002501399,0.0019189,0.001622138,0.001159821],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0008537251,"about_ca_system_score_gemma":0.00236626,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.003541822,"about_ca_topic_score_gemma":0.007002276,"domain_scores_codex":[0.9949302,0.001775683,0.0004151185,0.0009893994,0.001545904,0.0003436627],"domain_scores_gemma":[0.949527,0.03277164,0.006924507,0.005713558,0.004215477,0.0008477496],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.001778122,0.00175378,0.127496,0.00238197,0.0005114457,0.001886636,0.005367228,0.04820235,0.0779666,0.00560155,0.04699886,0.6800555],"study_design_scores_gemma":[0.0006644521,0.002587278,0.07534989,0.001044698,0.0005532519,0.002976833,0.004145332,0.7035294,0.1297484,0.01070718,0.06803518,0.0006582341],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.4583033,0.00213029,0.3145906,0.001884933,0.0003890816,0.0008719844,0.002533835,0.2140325,0.0052635],"genre_scores_gemma":[0.5992592,0.0004412962,0.3911817,0.0004140392,0.00005688575,0.0002662114,0.002462984,0.003046304,0.002871383],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.006471628,"threshold_uncertainty_score":0.02759379,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2092919558","doi":"10.1016/j.cose.2012.02.005","title":"Systematically breaking and fixing OpenID security: Formal analysis, semi-automated empirical evaluation, and practical countermeasures","year":2012,"lang":"en","type":"article","venue":"Computers & Security","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":49,"is_retracted":false,"has_abstract":false,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"Dalhousie University; University of British Columbia","funders":"","keywords":"Computer science; Single sign-on; Computer security; Protocol (science); Password; Security analysis; Authentication (law); Scalability; World Wide Web; Database","authors":[{"name":"San-Tsai Sun","is_ca":true},{"name":"Kirstie Hawkey","is_ca":true},{"name":"Konstantin Beznosov","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.03740046871827278,"gpt":0.3539438400005536,"spread":0.3165433712822808,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.02531378,0.001108146,0.0006593227,0.004211637,0.001367446,0.003199793,0.002729148,0.001757032,0.002051264],"category_scores_gemma":[0.1917072,0.0008741187,0.001157069,0.001591125,0.004063828,0.006491387,0.003780439,0.003309836,0.0003267889],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.003310923,"about_ca_system_score_gemma":0.007067241,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.003787237,"about_ca_topic_score_gemma":0.007073143,"domain_scores_codex":[0.9668998,0.01635436,0.002486215,0.00248841,0.0102461,0.001525071],"domain_scores_gemma":[0.6910973,0.2242345,0.0199024,0.04097277,0.02230745,0.001485625],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.001580568,0.003794339,0.1369206,0.002376357,0.0004771838,0.0005058926,0.008255824,0.1645199,0.04375733,0.09366325,0.004641269,0.5395074],"study_design_scores_gemma":[0.000408303,0.00189118,0.02723657,0.0007345793,0.0003283837,0.0005081515,0.00425152,0.7892078,0.061079,0.1083745,0.005732326,0.0002476783],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.6723439,0.0004055313,0.3172048,0.001343476,0.00007965198,0.0008658465,0.0004072213,0.002887253,0.004462339],"genre_scores_gemma":[0.8709213,0.0001193567,0.1277827,0.000101539,0.0000121384,0.0002594086,0.0003047456,0.0001205769,0.0003781161],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.02531378,"threshold_uncertainty_score":0.1338736,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2565985959","doi":"10.1007/s10703-016-0263-6","title":"Z3str2: an efficient solver for strings, regular expressions, and length constraints","year":2016,"lang":"en","type":"article","venue":"Formal Methods in System Design","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":46,"is_retracted":false,"has_abstract":false,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"University of Waterloo","funders":"","keywords":"Regular expression; Computer science; String (physics); Satisfiability modulo theories; Solver; Theoretical computer science; Predicate (mathematical logic); Algorithm; Mathematics; Programming language","authors":[{"name":"Yunhui Zheng","is_ca":false},{"name":"Vijay Ganesh","is_ca":true},{"name":"Sanu Subramanian","is_ca":true},{"name":"Omer Tripp","is_ca":false},{"name":"Murphy Berzish","is_ca":true},{"name":"Julian Dolby","is_ca":false},{"name":"Xiangyu Zhang","is_ca":false}],"retraction":null,"screen_n_in":null,"score":{"opus":0.06174490093142226,"gpt":0.3572660233340219,"spread":0.2955211224025996,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001777287,0.002839719,0.001322983,0.002093888,0.001044367,0.003314736,0.00448277,0.002190013,0.04934187],"category_scores_gemma":[0.009017603,0.001998155,0.002677505,0.002564949,0.001128694,0.004300178,0.003945227,0.00285081,0.01148269],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001696426,"about_ca_system_score_gemma":0.004580345,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.01021206,"about_ca_topic_score_gemma":0.02254399,"domain_scores_codex":[0.9977067,0.00051845,0.0002210169,0.0003967694,0.0008807026,0.0002763787],"domain_scores_gemma":[0.99626,0.002736286,0.0001695529,0.0003617584,0.000396752,0.00007549697],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0007103584,0.0002808994,0.002188087,0.00274518,0.0003498289,0.0008795093,0.0005868967,0.1124083,0.01190406,0.174006,0.1625223,0.5314186],"study_design_scores_gemma":[0.0005664125,0.00006278656,0.0002444228,0.0002025195,0.0001348113,0.000344964,0.0002723347,0.7067233,0.02167835,0.1644721,0.1052018,0.00009630693],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.003578879,0.0002188717,0.9490981,0.0004368822,0.0001210181,0.0002030531,0.003679975,0.03382483,0.00883844],"genre_scores_gemma":[0.05627024,0.00035323,0.9103714,0.0005314371,0.00007544918,0.0005163832,0.006929396,0.01220067,0.01275175],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.04934187,"threshold_uncertainty_score":0.165065,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2024474165","doi":"10.1109/dasc.2011.26","title":"S2XS2: A Server Side Approach to Automatically Detect XSS Attacks","year":2011,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":44,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"Queen's University","funders":"","keywords":"Cross-site scripting; Computer science; Client-side; Server-side; Scripting language; Overhead (engineering); Side channel attack; Dynamic web page; Web application; Computer security; Operating system; Web page; World Wide Web; Web application security; Cryptography","authors":[{"name":"Hossain Shahriar","is_ca":true},{"name":"Mohammad Zulkernine","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.04585423571730011,"gpt":0.2523752188025485,"spread":0.2065209830852484,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.00125995,0.001400488,0.0008499945,0.002616534,0.0004261204,0.00102934,0.001381029,0.001199789,0.003542613],"category_scores_gemma":[0.004222041,0.0007161887,0.0007679818,0.0006758963,0.0007256548,0.001497898,0.001216112,0.0008472311,0.002607886],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0004731354,"about_ca_system_score_gemma":0.001205198,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.002311128,"about_ca_topic_score_gemma":0.002297229,"domain_scores_codex":[0.9983516,0.0003059588,0.0001071007,0.0003135426,0.0008220548,0.00009975471],"domain_scores_gemma":[0.9966311,0.00123095,0.0005740679,0.0007786941,0.0006168527,0.0001683942],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.001818653,0.0009369082,0.04355776,0.0006770826,0.0003111196,0.001280787,0.0009099159,0.03923564,0.1378738,0.008248098,0.05127745,0.7138728],"study_design_scores_gemma":[0.000123722,0.0003449341,0.006660999,0.00004450341,0.00006260247,0.000735872,0.0000862907,0.8449292,0.1265756,0.004164703,0.01618113,0.00009054656],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.06200703,0.0002097854,0.6420949,0.0001817202,0.00007452095,0.0005715025,0.001326193,0.289421,0.004113233],"genre_scores_gemma":[0.4445503,0.0001403348,0.5376372,0.0002068016,0.0000631646,0.0003830818,0.00328575,0.006100325,0.007632887],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.003542613,"threshold_uncertainty_score":0.01185119,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W1630762513","doi":"","title":"Securing script-based extensibility in web browsers","year":2010,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":43,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"University of Toronto","funders":"","keywords":"Computer science; Scripting language; Extensibility; Web application; World Wide Web; Client-side scripting; JavaScript; Cross-site scripting; Web page; Code (set theory); Web navigation; Programming language; Web application security; Web API; Web development","authors":[{"name":"Vladan Djeric","is_ca":true},{"name":"Ashvin Goel","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.01093932889200317,"gpt":0.2439223756451482,"spread":0.2329830467531451,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.004967739,0.0006696593,0.0007491258,0.001916326,0.0006972635,0.002328763,0.001129389,0.0008634988,0.0006232597],"category_scores_gemma":[0.02293109,0.0008988039,0.000540828,0.0007787124,0.001652952,0.004912279,0.001865273,0.001697146,0.00058805],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0006988128,"about_ca_system_score_gemma":0.001096021,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.001463224,"about_ca_topic_score_gemma":0.001117,"domain_scores_codex":[0.9938876,0.001480289,0.0008991471,0.0007783154,0.002585957,0.0003687227],"domain_scores_gemma":[0.9626654,0.01015586,0.005962613,0.01657525,0.003696125,0.0009446328],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.001277833,0.0008391634,0.2115384,0.0004427494,0.0002904904,0.003595587,0.004786891,0.02104672,0.2520357,0.02350562,0.00724317,0.4733975],"study_design_scores_gemma":[0.0001160901,0.0008833652,0.05686476,0.0003155243,0.0002413966,0.007549085,0.0004248554,0.5623707,0.3232068,0.01902151,0.02865115,0.0003549015],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.651418,0.001079895,0.2725525,0.0005175169,0.0001907668,0.0005991812,0.0002869191,0.06634483,0.007010422],"genre_scores_gemma":[0.9393672,0.000310752,0.05743661,0.0002143012,0.00006531126,0.00008483948,0.0002169212,0.0008214554,0.001482674],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.004967739,"threshold_uncertainty_score":0.02627218,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W1475974720","doi":"","title":"Cookies lack integrity: real-world implications","year":2015,"lang":"en","type":"article","venue":"USENIX Security Symposium","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":35,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"Huawei Technologies (Canada)","funders":"","keywords":"Computer science; Computer security; Flag (linear algebra); Internet privacy; Session (web analytics); Domain (mathematical analysis); World Wide Web; Isolation (microbiology); Web browser; Domain name; The Internet","authors":[{"name":"Xiaofeng Zheng","is_ca":false},{"name":"Jian Jiang","is_ca":false},{"name":"Jinjin Liang","is_ca":false},{"name":"Haixin Duan","is_ca":false},{"name":"Shuo Chen","is_ca":false},{"name":"Tao Wan","is_ca":true},{"name":"Nicholas Weaver","is_ca":false}],"retraction":null,"screen_n_in":null,"score":{"opus":0.0671170811442712,"gpt":0.3218760085948079,"spread":0.2547589274505367,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0102377,0.0006659101,0.0005345183,0.002030995,0.002659487,0.005005762,0.002228245,0.005427991,0.01035922],"category_scores_gemma":[0.1043129,0.0008896946,0.0004949364,0.001974972,0.006311191,0.01646077,0.003148912,0.006365585,0.001626994],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.002933085,"about_ca_system_score_gemma":0.002362524,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.006750439,"about_ca_topic_score_gemma":0.00470841,"domain_scores_codex":[0.9886829,0.004700697,0.0005826448,0.001348435,0.003735937,0.0009493296],"domain_scores_gemma":[0.782082,0.165524,0.0134983,0.01857956,0.01770953,0.002606615],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"observational","study_design_scores_codex":[0.00164464,0.001297574,0.1048248,0.00167552,0.0002850528,0.01123301,0.01424523,0.02519706,0.007862516,0.5659182,0.08849657,0.1773199],"study_design_scores_gemma":[0.0003552054,0.0006620995,0.04318463,0.00208623,0.0003231373,0.027382,0.02451221,0.08217114,0.02449615,0.6139644,0.1803305,0.0005323738],"study_design_candidate":"observational","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.551418,0.01128014,0.1400482,0.1446865,0.0009827021,0.0005350183,0.001834018,0.002521106,0.1466943],"genre_scores_gemma":[0.978877,0.001884729,0.01175803,0.003177018,0.0001872078,0.0000747086,0.0002303123,0.000215738,0.003595276],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.01035922,"threshold_uncertainty_score":0.05414277,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2160138611","doi":"10.1109/csmr.2007.16","title":"Automated Protection of PHP Applications Against SQL-injection Attacks","year":2007,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":31,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false},"ca_institutions":"Polytechnique Montréal","funders":"Natural Sciences and Engineering Research Council of Canada","keywords":"SQL injection; Computer science; SQL; Confidentiality; Database; Web application; Relational database; Exploit; Code (set theory); Computer security; Query by Example; World Wide Web; Programming language; Search engine","authors":[{"name":"Ettore Merlo","is_ca":true},{"name":"Dominic Letarte","is_ca":true},{"name":"Giuliano Antoniol","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.01767341799957494,"gpt":0.2800589472672301,"spread":0.2623855292676552,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001406622,0.0006988285,0.000452727,0.00095062,0.0003830837,0.0008482004,0.0008053953,0.0007699633,0.001041248],"category_scores_gemma":[0.006611345,0.0004979387,0.0003797868,0.0004263747,0.000483572,0.001309368,0.00100378,0.001018356,0.000786756],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0003066816,"about_ca_system_score_gemma":0.0004278166,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0005712074,"about_ca_topic_score_gemma":0.0004257068,"domain_scores_codex":[0.9984576,0.0004119348,0.000118943,0.000239959,0.0006026656,0.0001690537],"domain_scores_gemma":[0.993091,0.002537232,0.0008102612,0.002749961,0.0006978833,0.0001136264],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.001180198,0.0006940216,0.01724646,0.0004228295,0.0001103949,0.001211159,0.0008088874,0.01777651,0.4024394,0.002746886,0.005622028,0.5497412],"study_design_scores_gemma":[0.0001251994,0.0005514789,0.01459934,0.00005883145,0.0001138595,0.001839291,0.00009116557,0.4321905,0.5377042,0.005159208,0.007497142,0.00006980893],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.5417238,0.0005204217,0.3815648,0.0004869859,0.00006549503,0.0004412154,0.000377454,0.06947786,0.00534191],"genre_scores_gemma":[0.9318677,0.0001367107,0.0648668,0.0001214293,0.00002347459,0.00006063436,0.0004183468,0.0008471951,0.001657747],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.001406622,"threshold_uncertainty_score":0.007439017,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2019560524","doi":"10.1145/2626371","title":"A Model-Based Approach for Crawling Rich Internet Applications","year":2014,"lang":"en","type":"article","venue":"ACM Transactions on the Web","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":29,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false},"ca_institutions":"IBM (Canada); University of Ottawa","funders":"Natural Sciences and Engineering Research Council of Canada; International Business Machines Corporation","keywords":"Crawling; Computer science; Web crawler; The Internet; World Wide Web; Web application; Ajax","authors":[{"name":"Mustafa Emre Dinçtürk","is_ca":true},{"name":"Guy-Vincent Jourdan","is_ca":true},{"name":"Gregor von Bochmann","is_ca":true},{"name":"Iosif Viorel Onut","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.03621463762361464,"gpt":0.2589408671043987,"spread":0.222726229480784,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001038642,0.0008866523,0.0008195166,0.001772572,0.0008919409,0.00236934,0.001561265,0.001456709,0.001604033],"category_scores_gemma":[0.004214763,0.0008025935,0.00110288,0.001352614,0.0009001928,0.002616441,0.001306099,0.001493523,0.0006683274],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001611511,"about_ca_system_score_gemma":0.002331692,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00425304,"about_ca_topic_score_gemma":0.007108908,"domain_scores_codex":[0.9985369,0.0005218931,0.00009108756,0.0001903965,0.0005821401,0.0000776243],"domain_scores_gemma":[0.9983285,0.0007023193,0.0001441056,0.0004595245,0.000289135,0.00007632667],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00007738343,0.0004252674,0.002043528,0.0004411238,0.0001833227,0.0004009291,0.0004182859,0.6720959,0.01909359,0.1554021,0.007563328,0.1418552],"study_design_scores_gemma":[0.00001025284,0.00004841873,0.0001312268,0.00001642788,0.0000234122,0.000151714,0.00003497889,0.9688167,0.002471584,0.02344179,0.00483782,0.00001569197],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.01048566,0.0002354956,0.984054,0.0003961919,0.00002790203,0.0001632594,0.00009151813,0.001247964,0.003297966],"genre_scores_gemma":[0.184491,0.0005598104,0.8105494,0.0001604892,0.00002779302,0.0004818799,0.0003529882,0.0001555046,0.003221165],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.00425304,"threshold_uncertainty_score":0.0116924,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2545525312","doi":"10.1109/passat/socialcom.2011.199","title":"An Analysis of Black-Box Web Application Security Scanners against Stored SQL Injection","year":2011,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":28,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"Concordia University of Edmonton","funders":"","keywords":"SQL injection; Computer science; Black box; SQL; Login; Database; Exploit; Web application; Vulnerability (computing); Computer security; World Wide Web; Artificial intelligence; Query by Example","authors":[{"name":"Nidal Khoury","is_ca":true},{"name":"Pavol Zavarsky","is_ca":true},{"name":"Dale Lindskog","is_ca":true},{"name":"Ron Ruhl","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.01496890538443615,"gpt":0.2513586340762636,"spread":0.2363897286918275,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0025413,0.0006042813,0.0005861374,0.002939912,0.0003806103,0.0007385007,0.0005781185,0.0008069155,0.0009176483],"category_scores_gemma":[0.01643915,0.0003271118,0.0006095992,0.001081755,0.0006643561,0.001409484,0.000536168,0.0003982525,0.0003426291],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0004616494,"about_ca_system_score_gemma":0.0005915733,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00152442,"about_ca_topic_score_gemma":0.00151581,"domain_scores_codex":[0.9960982,0.0009037258,0.000328088,0.0004817003,0.001851335,0.0003369049],"domain_scores_gemma":[0.95125,0.0311498,0.00545555,0.004190861,0.007239758,0.0007140843],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"observational","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00487753,0.003068499,0.4301431,0.0009402191,0.0006476166,0.003807216,0.002465763,0.05988014,0.2627108,0.003148987,0.004991345,0.2233188],"study_design_scores_gemma":[0.00009569585,0.003664269,0.2710624,0.00006766671,0.0003197704,0.002701137,0.0005401283,0.5655805,0.1526473,0.001167872,0.002018178,0.0001352151],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.9943874,0.00009237487,0.003601528,0.00003348546,0.000007816144,0.0000693424,0.0001566538,0.0009592876,0.0006920228],"genre_scores_gemma":[0.9929871,0.00003593121,0.005957291,0.00002316139,0.000004259006,0.00002915567,0.0004263036,0.00006277322,0.000474008],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.002939912,"threshold_uncertainty_score":0.01343983,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2095804328","doi":"10.1109/compsacw.2011.27","title":"Injecting Comments to Detect JavaScript Code Injection Attacks","year":2011,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":28,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false},"ca_institutions":"Queen's University","funders":"Natural Sciences and Engineering Research Council of Canada","keywords":"JavaScript; Unobtrusive JavaScript; Computer science; Cross-site scripting; Scripting language; Code (set theory); Programming language; Web application; Source code; Redundant code; Rich Internet application; Operating system; Code generation; Key (lock); Web service; Web development","authors":[{"name":"Hossain Shahriar","is_ca":true},{"name":"Mohammad Zulkernine","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.06320345382442585,"gpt":0.2821957931494312,"spread":0.2189923393250053,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001403041,0.001095721,0.0006696584,0.001797196,0.0004232946,0.0006991676,0.0009191293,0.001420227,0.002108122],"category_scores_gemma":[0.009782379,0.0004470196,0.0004257409,0.0006178142,0.0005325066,0.001461061,0.0007360619,0.0009440946,0.001847233],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0003704134,"about_ca_system_score_gemma":0.0008102958,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.001054051,"about_ca_topic_score_gemma":0.001637707,"domain_scores_codex":[0.9976433,0.0003766707,0.0001658459,0.0003286333,0.001317956,0.0001675009],"domain_scores_gemma":[0.9807537,0.00702718,0.003352427,0.00268818,0.005551292,0.0006272466],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"bench_or_experimental","study_design_gemma":"not_applicable","study_design_scores_codex":[0.001688356,0.001445286,0.07667781,0.0009054063,0.0001457556,0.002412796,0.001522934,0.01098008,0.4847593,0.004393773,0.01166063,0.403408],"study_design_scores_gemma":[0.0001116369,0.001036464,0.02492547,0.0001186441,0.0001300231,0.002490131,0.0002030246,0.2480378,0.7047097,0.001740357,0.01633663,0.0001600833],"study_design_candidate":"not_applicable","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.486582,0.0004261851,0.4137298,0.0003781037,0.0002126545,0.001222565,0.0008787428,0.08755828,0.00901166],"genre_scores_gemma":[0.772679,0.0001961966,0.2148391,0.0002974492,0.0000693322,0.0002068273,0.0009576147,0.002219472,0.00853509],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.002108122,"threshold_uncertainty_score":0.007420063,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2100883222","doi":"10.1109/compsac.2009.191","title":"Automatic Testing of Program Security Vulnerabilities","year":2009,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":27,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false},"ca_institutions":"Queen's University","funders":"Natural Sciences and Engineering Research Council of Canada","keywords":"Security testing; Computer science; Fuzz testing; Application security; SQL injection; Computer security; Secure coding; Vulnerability (computing); Security bug; Automation; Manual testing; Software security assurance; Software engineering; Information security; Security service; Security information and event management; Cloud computing security; Software; World Wide Web; Engineering; Software development","authors":[{"name":"Hossain Shahriar","is_ca":true},{"name":"Mohammad Zulkernine","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.02609552071501577,"gpt":0.290460923118325,"spread":0.2643654024033092,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.002292713,0.0006399192,0.0004407886,0.003461095,0.0003928615,0.0008956203,0.0009871832,0.0008286676,0.001602387],"category_scores_gemma":[0.01773039,0.0003323371,0.0006585694,0.00130172,0.0007207806,0.001638663,0.0008821271,0.0005261713,0.0004587369],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0004822166,"about_ca_system_score_gemma":0.0009948977,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00127166,"about_ca_topic_score_gemma":0.001790116,"domain_scores_codex":[0.9962373,0.001459825,0.0002377858,0.0003830651,0.00147656,0.0002054712],"domain_scores_gemma":[0.9712467,0.02143763,0.002389375,0.002618381,0.002103202,0.0002048113],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0005262028,0.000779752,0.1068616,0.0009246503,0.0002419336,0.001038566,0.001799948,0.04418221,0.1151132,0.009436004,0.003809975,0.715286],"study_design_scores_gemma":[0.0001534747,0.001391328,0.08243256,0.00046666,0.0003564934,0.003991532,0.0008312691,0.61185,0.2655776,0.02037205,0.01244577,0.0001312287],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.6738257,0.0009486767,0.3005506,0.0004926462,0.00003261093,0.0003034467,0.000535962,0.01570589,0.007604566],"genre_scores_gemma":[0.9075046,0.0002568061,0.09039952,0.00009068495,0.00001161703,0.00008972978,0.0005665097,0.0002921581,0.0007884877],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.003461095,"threshold_uncertainty_score":0.01212513,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2963961461","doi":"10.20904/281-2037","title":"Analysis of SQL Injection Detection Techniques","year":2017,"lang":"en","type":"article","venue":"Theoretical and Applied Informatics","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":27,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"Concordia University","funders":"","keywords":"Computer science; SQL injection; SQL; Database; Programming language; Information retrieval; Query by Example","authors":[{"name":"Jai Puneet Singh","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.006657630008014876,"gpt":0.2425503700508377,"spread":0.2358927400428228,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.003124612,0.0007689338,0.0006421877,0.006209173,0.0003886033,0.001739574,0.001222432,0.0007076039,0.00185011],"category_scores_gemma":[0.01157563,0.0003884282,0.001000021,0.003303339,0.0005307498,0.002900654,0.0005570782,0.0009064906,0.001052906],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0007045071,"about_ca_system_score_gemma":0.001184207,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0007116263,"about_ca_topic_score_gemma":0.000579657,"domain_scores_codex":[0.9937205,0.0008133289,0.0005357977,0.0006641886,0.003991668,0.0002745621],"domain_scores_gemma":[0.9860524,0.006697275,0.002013858,0.0007586828,0.004343349,0.0001345534],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"bench_or_experimental","study_design_scores_codex":[0.0001889368,0.0001861863,0.02367334,0.004281396,0.0002265282,0.0005588995,0.0005560247,0.004731951,0.01757811,0.01569499,0.007613526,0.9247102],"study_design_scores_gemma":[0.00009392443,0.001917838,0.1169449,0.006291213,0.002130844,0.02335347,0.002069535,0.2014547,0.2261031,0.04412306,0.3750837,0.0004337502],"study_design_candidate":"bench_or_experimental","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.1571656,0.2778238,0.5066939,0.002540511,0.0006122882,0.000936045,0.001855545,0.003273418,0.04909881],"genre_scores_gemma":[0.6318328,0.1261204,0.2272015,0.0008172305,0.0005359449,0.0003503106,0.002761184,0.0003125599,0.0100681],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.006209173,"threshold_uncertainty_score":0.01652473,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2615381372","doi":"10.1109/icst.2017.28","title":"JavaScript: The (Un)Covered Parts","year":2017,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":27,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"University of British Columbia","funders":"","keywords":"JavaScript; Callback; Unobtrusive JavaScript; Computer science; Programming language; Code coverage; Test case; Web application; Code (set theory); Source code; Operating system; Rich Internet application; Database; Software; Set (abstract data type)","authors":[{"name":"Amin Milani Fard","is_ca":true},{"name":"Ali Mesbah","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.02628621351525841,"gpt":0.258392586067161,"spread":0.2321063725519026,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.005422706,0.0005760045,0.0006748376,0.003696776,0.0006880826,0.00226207,0.001129406,0.0009811817,0.001160221],"category_scores_gemma":[0.07790796,0.0006196452,0.0005115509,0.004115839,0.001893173,0.003813605,0.001834864,0.001202025,0.0007351201],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.000555015,"about_ca_system_score_gemma":0.001118724,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.002456607,"about_ca_topic_score_gemma":0.00242047,"domain_scores_codex":[0.986418,0.002827724,0.001130781,0.001431815,0.007646327,0.0005454017],"domain_scores_gemma":[0.858904,0.09361554,0.01621288,0.01349777,0.01551558,0.002254259],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"not_applicable","study_design_scores_codex":[0.0008039128,0.000246851,0.4464435,0.003500955,0.0003315755,0.003479866,0.01345469,0.005324951,0.0480282,0.007426054,0.01393231,0.4570271],"study_design_scores_gemma":[0.00006279226,0.0007594682,0.6849296,0.003376903,0.0005314598,0.0167969,0.006019928,0.03145246,0.05638778,0.02699973,0.172471,0.0002119902],"study_design_candidate":"not_applicable","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.9102316,0.007303658,0.06055185,0.002571352,0.0001840102,0.0001966497,0.004107178,0.004231996,0.01062164],"genre_scores_gemma":[0.9593701,0.001744284,0.02726947,0.0009693849,0.0001533927,0.0001772456,0.005109637,0.002859637,0.002346886],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.005422706,"threshold_uncertainty_score":0.02867836,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2111273637","doi":"10.1109/wse.2009.5631226","title":"WAFA: Fine-grained dynamic analysis of web applications","year":2009,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":27,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"Queen's University","funders":"","keywords":"Computer science; SQL injection; Parsing; Database; Dynamic web page; Web application; Web application security; SQL; Web page; Data Web; Web modeling; World Wide Web; Web development; Programming language; Query by Example","authors":[{"name":"Manar H. Alalfi","is_ca":true},{"name":"James R. Cordy","is_ca":true},{"name":"Thomas Dean","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.007437130510782364,"gpt":0.2647628234546552,"spread":0.2573256929438729,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0008369412,0.0008680166,0.0005284288,0.002508712,0.0006932975,0.001221149,0.001287468,0.0007938679,0.002182442],"category_scores_gemma":[0.003714452,0.0005789023,0.0009948679,0.0008930899,0.0007522581,0.003364437,0.001404725,0.001099754,0.001009497],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.000501729,"about_ca_system_score_gemma":0.0007771904,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.003142418,"about_ca_topic_score_gemma":0.002874236,"domain_scores_codex":[0.9992332,0.0001235313,0.00006351536,0.0002059704,0.000302791,0.00007098129],"domain_scores_gemma":[0.9977715,0.0008241361,0.0002385166,0.0007767246,0.0003077012,0.00008148994],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0007852721,0.0005691252,0.0414035,0.0006075896,0.0003172886,0.002199531,0.001385199,0.09205759,0.1750262,0.01720991,0.0259097,0.6425292],"study_design_scores_gemma":[0.00003487155,0.000114446,0.00590177,0.00002563232,0.0000360856,0.0006860307,0.00009611748,0.9087994,0.05486687,0.0171001,0.01227709,0.00006161159],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.09608191,0.0002398088,0.7619303,0.0002864303,0.0000503828,0.0002546837,0.001878788,0.1366091,0.002668561],"genre_scores_gemma":[0.5602946,0.0002498692,0.4266181,0.000205947,0.00005699222,0.000308099,0.00329802,0.00469181,0.004276576],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.003142418,"threshold_uncertainty_score":0.007301033,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2139974906","doi":"10.1109/pst.2011.5971962","title":"Extraction and comprehension of moodle's access control model: A case study","year":2011,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":25,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false},"ca_institutions":"Polytechnique Montréal","funders":"Natural Sciences and Engineering Research Council of Canada","keywords":"Code refactoring; Computer science; Source code; Program comprehension; Software engineering; Source lines of code; Code (set theory); Programming language; Comprehension; Software; Reverse engineering; Simple (philosophy); Software system; Set (abstract data type)","authors":[{"name":"François Gauthier","is_ca":true},{"name":"Dominic Letarte","is_ca":true},{"name":"Thomas Lavoie","is_ca":true},{"name":"Ettore Merlo","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.09254247991074538,"gpt":0.3311132419528572,"spread":0.2385707620421118,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.003297217,0.0004020758,0.0003459756,0.0009442793,0.0007957303,0.0009227879,0.0009577674,0.001346326,0.001316142],"category_scores_gemma":[0.02224878,0.0004193638,0.0004261104,0.0005837573,0.0009627155,0.001787171,0.001071644,0.001098678,0.000328598],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0007789002,"about_ca_system_score_gemma":0.000712244,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.002826198,"about_ca_topic_score_gemma":0.005509967,"domain_scores_codex":[0.9974904,0.001111602,0.0001504392,0.0003826894,0.0007243754,0.000140481],"domain_scores_gemma":[0.9702355,0.02355634,0.001367506,0.002943687,0.001673534,0.0002234266],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"qualitative","study_design_scores_codex":[0.001888159,0.005583054,0.1305923,0.00275088,0.0002189958,0.03280369,0.09382837,0.04502391,0.1604675,0.02080702,0.01190988,0.4941263],"study_design_scores_gemma":[0.0004677339,0.003487796,0.1287147,0.0008956828,0.0004143217,0.0214352,0.01496975,0.3965068,0.3468757,0.01383488,0.07203012,0.0003673856],"study_design_candidate":"qualitative","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.9327781,0.00009860483,0.06192582,0.0003071606,0.00000959914,0.0003297551,0.0003076604,0.001201309,0.003041997],"genre_scores_gemma":[0.9171518,0.00009183979,0.07974356,0.0001161447,0.000006800041,0.0001769941,0.0003834842,0.0003172141,0.00201211],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.003297217,"threshold_uncertainty_score":0.01743758,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2920590155","doi":"10.1145/3297067.3297096","title":"Detecting Blind Cross-Site Scripting Attacks Using Machine Learning","year":2018,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":24,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false},"ca_institutions":"Concordia University of Edmonton","funders":"Ministère de l'Économie, de la Science et de l'Innovation - Québec","keywords":"Cross-site scripting; Computer science; Scripting language; Web application; Computer security; World Wide Web; Web server; Server; Web page; Web application security; Operating system; The Internet; Web development","authors":[{"name":"Gurpreet Kaur","is_ca":true},{"name":"Yasir Malik","is_ca":true},{"name":"Hamman Samuel","is_ca":true},{"name":"Fehmi Jaafar","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.05213637726759891,"gpt":0.3356718794094752,"spread":0.2835355021418763,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001673877,0.001223781,0.0009814921,0.002932954,0.0004194987,0.001162941,0.0009065705,0.001138058,0.0007249498],"category_scores_gemma":[0.005840013,0.0003227844,0.0007210582,0.001016558,0.0005358548,0.001738215,0.000719948,0.001174857,0.0006611156],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0006394412,"about_ca_system_score_gemma":0.0009571972,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00256279,"about_ca_topic_score_gemma":0.00225417,"domain_scores_codex":[0.9978508,0.0004918858,0.0002002145,0.0004930059,0.0007205136,0.0002436591],"domain_scores_gemma":[0.9949373,0.002039914,0.001035726,0.0007497467,0.0009747758,0.0002623668],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0005793313,0.001894616,0.1409742,0.0002735875,0.0003713681,0.0006963167,0.0001590917,0.2539694,0.03356706,0.003236963,0.008227636,0.5560505],"study_design_scores_gemma":[0.000008129841,0.0001475446,0.00602232,0.00001553785,0.00002415106,0.000128472,0.00002969997,0.9793308,0.01107348,0.002380417,0.0008192245,0.00002015485],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"methods","genre_scores_codex":[0.5453617,0.001336415,0.4374026,0.0006626703,0.0001535157,0.0003626913,0.0009096297,0.00869712,0.005113663],"genre_scores_gemma":[0.9268689,0.0002022798,0.06991249,0.0001422349,0.00004435567,0.00007401872,0.001138824,0.0000651635,0.001551876],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.002932954,"threshold_uncertainty_score":0.008852422,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W4224278610","doi":"10.18280/rces.090101","title":"A Review on Web Application Vulnerability Assessment and Penetration Testing","year":2022,"lang":"en","type":"review","venue":"Review of Computer Engineering Studies","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":24,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":false,"ca_fund":false,"ca_venue":true,"about_ca":false},"ca_institutions":"","funders":"","keywords":"Vulnerability assessment; Penetration (warfare); Computer science; Web testing; Vulnerability (computing); World Wide Web; Engineering; The Internet; Computer security; Web application security; Psychology; Web development; Operations research; Social psychology","authors":[{"name":"Urshila Ravindran","is_ca":false}],"retraction":null,"screen_n_in":null,"score":{"opus":0.08964140158777062,"gpt":0.3897278193972771,"spread":0.3000864178095065,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.002063015,0.001080234,0.001543209,0.006788215,0.0004394448,0.001369273,0.001297848,0.001310826,0.004636678],"category_scores_gemma":[0.005498935,0.0005708571,0.001392043,0.006577911,0.0005756192,0.002483191,0.0007665711,0.00126385,0.001622702],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0008806881,"about_ca_system_score_gemma":0.003181788,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.002524276,"about_ca_topic_score_gemma":0.004063301,"domain_scores_codex":[0.9986626,0.0002498658,0.0002817659,0.0001498678,0.0005979479,0.00005787432],"domain_scores_gemma":[0.9949274,0.002880727,0.0005679213,0.0001203056,0.001381233,0.0001224388],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"not_applicable","study_design_scores_codex":[0.00006045514,0.00009053097,0.0005762415,0.08719429,0.0002082763,0.0002983863,0.000152699,0.0004033975,0.001503672,0.002500666,0.03901881,0.8679925],"study_design_scores_gemma":[0.00001534364,0.0001986102,0.002119992,0.03601919,0.0006462852,0.001669538,0.0001427679,0.0001376394,0.00114736,0.001354124,0.9565068,0.00004233453],"study_design_candidate":"not_applicable","study_design_consensus":null,"genre_codex":"review","genre_gemma":"review","genre_scores_codex":[0.0001706939,0.9975287,0.0002701544,0.0003382222,0.00019901,0.00002320756,0.00004673115,0.00001243428,0.001410863],"genre_scores_gemma":[0.0008021726,0.9981613,0.0003064485,0.0002299091,0.0000953518,0.00001770101,0.00004932395,0.000003202259,0.0003346022],"genre_candidate":"review","genre_consensus":"review","teacher_disagreement_score":0.006788215,"threshold_uncertainty_score":0.01551121,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2111472349","doi":"10.1109/icstw.2010.46","title":"Some Modeling Challenges When Testing Rich Internet Applications for Security","year":2010,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":22,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false},"ca_institutions":"IBM (Canada); University of Ottawa","funders":"Center for Advanced Study, University of Illinois at Urbana-Champaign; Natural Sciences and Engineering Research Council of Canada; International Business Machines Corporation","keywords":"Computer science; Ajax; Web application security; Rich Internet application; Server; The Internet; Web application; World Wide Web; Computer security; Web development","authors":[{"name":"Kamara Benjamin","is_ca":true},{"name":"Gregor von Bochmann","is_ca":true},{"name":"Guy-Vincent Jourdan","is_ca":true},{"name":"Iosif-Viorel Onut","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.0607596269004923,"gpt":0.2819070359420563,"spread":0.221147409041564,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0137479,0.001326423,0.001311705,0.001445346,0.001595749,0.004060764,0.004799969,0.004555545,0.001825486],"category_scores_gemma":[0.03713179,0.001584065,0.00176468,0.001678743,0.003337004,0.008292147,0.002452823,0.003446808,0.0003740846],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.002386605,"about_ca_system_score_gemma":0.002458992,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.01204034,"about_ca_topic_score_gemma":0.01371499,"domain_scores_codex":[0.990607,0.005254552,0.0008187524,0.0008939155,0.001893878,0.0005318479],"domain_scores_gemma":[0.9656054,0.02600414,0.001930104,0.003458251,0.002479914,0.0005221874],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0001093839,0.0003583061,0.007666312,0.0002604006,0.0001078721,0.0007087836,0.00116887,0.7785789,0.00233591,0.1804778,0.002159965,0.02606752],"study_design_scores_gemma":[0.00002604206,0.0000714534,0.0004907445,0.00004421804,0.0000394047,0.0001820596,0.0001940144,0.887143,0.0009354173,0.1077678,0.003069277,0.00003660187],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.06183328,0.0006765801,0.9234664,0.005718611,0.00006717187,0.0003247927,0.0002526672,0.0007896589,0.006870916],"genre_scores_gemma":[0.4072525,0.0007765327,0.5872569,0.0007071759,0.0001628049,0.0007430878,0.0003389076,0.0002483764,0.002513731],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.0137479,"threshold_uncertainty_score":0.0727067,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W1536000481","doi":"10.1007/978-3-642-02658-4_50","title":"Browser-Based Enforcement of Interface Contracts in Web Applications with BeepBeep","year":2009,"lang":"en","type":"book-chapter","venue":"Lecture notes in computer science","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":21,"is_retracted":false,"has_abstract":false,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"Université du Québec à Montréal","funders":"","keywords":"Computer science; Ajax; Java applet; XML; Interface (matter); Java; Programming language; Operating system; Web application; JSON; Database; User interface","authors":[{"name":"Sylvain Hallé","is_ca":false},{"name":"Roger Villemaire","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.01203293627852415,"gpt":0.2488462742398305,"spread":0.2368133379613064,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.003406195,0.0004127237,0.0005801268,0.0006173192,0.0009552421,0.001968328,0.001676407,0.00175911,0.004640256],"category_scores_gemma":[0.009877617,0.0008615691,0.000491934,0.0006153671,0.001508576,0.002205086,0.002590328,0.002769173,0.001045146],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.000683833,"about_ca_system_score_gemma":0.001362849,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.003239823,"about_ca_topic_score_gemma":0.004979299,"domain_scores_codex":[0.9973104,0.0006692384,0.0001671611,0.0001968763,0.001271053,0.0003852689],"domain_scores_gemma":[0.9952348,0.001899183,0.0002310074,0.001927517,0.0005590651,0.0001485398],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.001368723,0.0008577902,0.005317815,0.0003239671,0.00009631642,0.00168919,0.002337825,0.04444212,0.09135792,0.3930995,0.01910628,0.4400026],"study_design_scores_gemma":[0.0002053457,0.0001587939,0.002341205,0.0001783498,0.00008677084,0.0009070507,0.0002269885,0.6932327,0.115951,0.1367105,0.04989302,0.0001082233],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.1729492,0.0004256586,0.7732568,0.0005712708,0.0002050043,0.0003128734,0.0001118818,0.01594602,0.03622131],"genre_scores_gemma":[0.8086021,0.0002388588,0.1691537,0.0002102866,0.0000331434,0.0001524692,0.0001761819,0.00172719,0.01970596],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.004640256,"threshold_uncertainty_score":0.01801389,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2050396717","doi":"10.1145/2107581.2107584","title":"Testing and assessing web vulnerability scanners for persistent SQL injection attacks","year":2011,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":21,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"Concordia University of Edmonton","funders":"","keywords":"SQL injection; Computer science; Login; Vulnerability (computing); Exploit; SQL; Web application; Cross-site scripting; Testbed; Secure coding; Database; Computer security; Web application security; Web page; World Wide Web; Information security; Software security assurance; Query by Example; Web development","authors":[{"name":"Nidal Khoury","is_ca":true},{"name":"Pavol Zavarsky","is_ca":true},{"name":"Dale Lindskog","is_ca":true},{"name":"Ron Ruhl","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.09539819187917734,"gpt":0.3024152985857622,"spread":0.2070171067065849,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.003035442,0.0009669118,0.0006748925,0.001515905,0.0004041506,0.000658942,0.001150721,0.001142733,0.0007863696],"category_scores_gemma":[0.01319191,0.0005673249,0.0004896024,0.0006116815,0.0007206199,0.002013934,0.0009172247,0.0005373601,0.0003993151],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0006083098,"about_ca_system_score_gemma":0.0006498391,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.001745443,"about_ca_topic_score_gemma":0.001997524,"domain_scores_codex":[0.9972925,0.0008440235,0.0002638685,0.0004936254,0.0008222476,0.0002837999],"domain_scores_gemma":[0.9815621,0.009942457,0.003411726,0.002189283,0.002044343,0.0008502406],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"bench_or_experimental","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.002684989,0.007459198,0.3184802,0.0009173545,0.0004873113,0.001332425,0.001702795,0.09285066,0.4103974,0.002123379,0.003454037,0.1581102],"study_design_scores_gemma":[0.0002947089,0.01047318,0.1360693,0.00006467853,0.0001827927,0.001059032,0.0005146642,0.5405847,0.3075955,0.0009105573,0.002070941,0.0001797996],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.9874833,0.00004857789,0.009470738,0.00003379009,0.0000117039,0.0001802802,0.0001579715,0.002245476,0.0003682939],"genre_scores_gemma":[0.978328,0.00004479068,0.02059414,0.00002899523,0.000005105287,0.000133974,0.000402652,0.00008577282,0.0003764396],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.003035442,"threshold_uncertainty_score":0.01605314,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2121959582","doi":"10.1109/issre.2011.27","title":"Server Side Detection of Content Sniffing Attacks","year":2011,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":21,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false},"ca_institutions":"Queen's University","funders":"Natural Sciences and Engineering Research Council of Canada","keywords":"Computer science; JavaScript; Upload; Sniffing; Operating system; Computer security; World Wide Web","authors":[{"name":"Anton Barua","is_ca":true},{"name":"Hossain Shahriar","is_ca":true},{"name":"Mohammad Zulkernine","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.09506084498035064,"gpt":0.2472246332399861,"spread":0.1521637882596354,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001336316,0.001034285,0.00118796,0.001756433,0.0004809659,0.001438854,0.001208251,0.001310607,0.00133005],"category_scores_gemma":[0.007640413,0.0004710726,0.0005305738,0.0004955574,0.0005946556,0.001982589,0.001060384,0.001173529,0.001238098],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0005498444,"about_ca_system_score_gemma":0.0009063408,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.001014035,"about_ca_topic_score_gemma":0.0007338336,"domain_scores_codex":[0.9964155,0.0006532604,0.000214395,0.0004326828,0.001990185,0.0002939204],"domain_scores_gemma":[0.989504,0.002847505,0.001752347,0.002813429,0.002723335,0.0003593809],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"bench_or_experimental","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.001462581,0.001187382,0.07533535,0.0005031172,0.0003111611,0.003038788,0.001047365,0.03629783,0.4823458,0.007384997,0.007202924,0.3838827],"study_design_scores_gemma":[0.00003886236,0.0004261502,0.0149893,0.00004571792,0.00008869151,0.001604908,0.0001027073,0.6220455,0.3557244,0.001508496,0.003347676,0.00007768089],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.4450434,0.0003141051,0.4850394,0.0001968999,0.00007030134,0.0006647824,0.0002868258,0.06052419,0.007860144],"genre_scores_gemma":[0.9355954,0.0001013752,0.06073531,0.00008000792,0.00001605035,0.0000748614,0.0003134941,0.0006080923,0.002475431],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.001756433,"threshold_uncertainty_score":0.007067204,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2101198401","doi":"10.1109/dsn.2010.5544951","title":"Data recovery for web applications","year":2010,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":21,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"University of Toronto","funders":"","keywords":"Backup; Undo; Computer science; Data loss; Overhead (engineering); Web application; Data recovery; Vulnerability (computing); System administrator; Database; Web server; Computer security; World Wide Web; Operating system; The Internet","authors":[{"name":"İstemi Ekin Akkuş","is_ca":true},{"name":"Ashvin Goel","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.04197162548359137,"gpt":0.3091289613369031,"spread":0.2671573358533117,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.002330844,0.0009640326,0.0007024341,0.00236544,0.001453293,0.001961951,0.002102244,0.001266811,0.003326169],"category_scores_gemma":[0.01497738,0.0007919801,0.0006610177,0.001380661,0.0007894965,0.00350685,0.003253513,0.001857335,0.002001598],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0008835955,"about_ca_system_score_gemma":0.001687809,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00331423,"about_ca_topic_score_gemma":0.00264049,"domain_scores_codex":[0.9963147,0.0006490204,0.0003492605,0.0004935159,0.001838822,0.0003546878],"domain_scores_gemma":[0.9871488,0.002548618,0.0017044,0.00569884,0.002464924,0.000434443],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"not_applicable","study_design_scores_codex":[0.001073368,0.0005959981,0.02598733,0.0007664373,0.0001397891,0.00140107,0.00117449,0.02333872,0.06907264,0.007549277,0.03436073,0.8345402],"study_design_scores_gemma":[0.0002178561,0.000618378,0.01769517,0.0003625359,0.0002262573,0.002854342,0.001049647,0.6036696,0.2655158,0.0193066,0.08823368,0.0002501203],"study_design_candidate":"not_applicable","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.2110201,0.003329071,0.6055532,0.003245802,0.0004097293,0.001329164,0.001085385,0.1603912,0.01363629],"genre_scores_gemma":[0.7580754,0.0009256559,0.2235447,0.0007351242,0.0001083252,0.0002892178,0.00168621,0.002752824,0.01188253],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.003326169,"threshold_uncertainty_score":0.01232678,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W4406153408","doi":"10.1145/3711816","title":"LLM-Powered Static Binary Taint Analysis","year":2025,"lang":"en","type":"article","venue":"ACM Transactions on Software Engineering and Methodology","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":20,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"University of Waterloo","funders":"Ant Group","keywords":"Taint checking; Computer science; Firmware; Static analysis; Vulnerability (computing); Binary number; Scalability; State (computer science); Computer security; Software; Computer hardware; Operating system; Programming language","authors":[{"name":"Puzhuo Liu","is_ca":false},{"name":"C. P. Sun","is_ca":true},{"name":"Yaowen Zheng","is_ca":false},{"name":"Chuan Qin","is_ca":false},{"name":"Y. F. Wang","is_ca":false},{"name":"Zhenyang Xu","is_ca":true},{"name":"Zhi Li","is_ca":false},{"name":"Peng Di","is_ca":false},{"name":"Yu Jiang","is_ca":false},{"name":"Limin Sun","is_ca":false}],"retraction":null,"screen_n_in":null,"score":{"opus":0.04508240882382882,"gpt":0.3181407358867413,"spread":0.2730583270629125,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001856388,0.001214481,0.0007967296,0.002632375,0.0007008471,0.002073478,0.001839297,0.0008635251,0.00564243],"category_scores_gemma":[0.009924416,0.0008330283,0.001438762,0.0007966859,0.00156051,0.006390621,0.003891418,0.001682037,0.002601721],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001134188,"about_ca_system_score_gemma":0.002621555,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.001964323,"about_ca_topic_score_gemma":0.003846867,"domain_scores_codex":[0.9967225,0.0008223572,0.0001992286,0.0004405309,0.001511071,0.0003043087],"domain_scores_gemma":[0.9937748,0.00208933,0.0006614258,0.002185071,0.00113493,0.0001545265],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0010012,0.0004396152,0.02351482,0.001537367,0.0002767616,0.001181904,0.001165571,0.04632268,0.1139486,0.09358767,0.04852843,0.6684954],"study_design_scores_gemma":[0.00008371367,0.0003180946,0.003101189,0.0002985411,0.0001960141,0.001164522,0.0003119749,0.7323647,0.1024187,0.08550001,0.07401314,0.0002293616],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.04539574,0.0008185274,0.8283787,0.0009367223,0.0001985498,0.0001994776,0.001134223,0.1150756,0.007862436],"genre_scores_gemma":[0.5762294,0.0005144847,0.4006619,0.001347962,0.0001775778,0.0002990692,0.002683188,0.01007839,0.008007945],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.00564243,"threshold_uncertainty_score":0.01887584,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2532538584","doi":"10.1109/passat/socialcom.2011.58","title":"A Study of the Effectiveness of CSRF Guard","year":2011,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":20,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"Concordia University of Edmonton","funders":"","keywords":"Guard (computer science); Computer science; Computer security; World Wide Web","authors":[{"name":"Bo‐Yan Chen","is_ca":true},{"name":"Pavol Zavarsky","is_ca":true},{"name":"Ron Ruhl","is_ca":true},{"name":"Dale Lindskog","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.03659824022094937,"gpt":0.2560633732281407,"spread":0.2194651330071913,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.006780895,0.0004446497,0.0004270575,0.001410739,0.0008267723,0.001761699,0.0007105603,0.001085724,0.003696658],"category_scores_gemma":[0.05295207,0.0001880302,0.000435078,0.0008285543,0.001054615,0.003454891,0.0008147889,0.001288589,0.0006034399],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00132133,"about_ca_system_score_gemma":0.0007639163,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.004601288,"about_ca_topic_score_gemma":0.002244639,"domain_scores_codex":[0.9956439,0.002111865,0.000275474,0.0004648621,0.001131939,0.0003719851],"domain_scores_gemma":[0.8565832,0.1196053,0.007967782,0.005757304,0.007788055,0.002298404],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"observational","study_design_gemma":"observational","study_design_scores_codex":[0.007420393,0.006312602,0.4060391,0.001435096,0.0007063955,0.00208177,0.006824365,0.1138776,0.05105161,0.03913824,0.007561569,0.3575513],"study_design_scores_gemma":[0.0003610668,0.01936496,0.2666019,0.0003267801,0.0007955558,0.003351076,0.01388476,0.5854853,0.07120749,0.02266278,0.01568182,0.0002765142],"study_design_candidate":"observational","study_design_consensus":"observational","genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.9789803,0.0004025126,0.004613369,0.0002163101,0.00001817014,0.0001037401,0.0001097171,0.00009571634,0.01546003],"genre_scores_gemma":[0.9972531,0.00008792471,0.001697133,0.00003260125,0.000004546341,0.00001473789,0.00005580351,0.00001511842,0.0008390215],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.006780895,"threshold_uncertainty_score":0.03586119,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2130828213","doi":"10.1109/wcre.2012.34","title":"Fast Detection of Access Control Vulnerabilities in PHP Applications","year":2012,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":19,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"Polytechnique Montréal","funders":"","keywords":"Computer science; SQL injection; Access control; Secure coding; Scripting language; Scalability; Cross-site scripting; Web application; Computer security; Web application security; Operating system; Information security; World Wide Web; The Internet; Software security assurance; Web development","authors":[{"name":"François Gauthier","is_ca":true},{"name":"Ettore Merlo","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.02216698525588525,"gpt":0.282508126285177,"spread":0.2603411410292918,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001653636,0.001025781,0.0007453273,0.002588885,0.0005530764,0.001454505,0.0012368,0.001060076,0.001894383],"category_scores_gemma":[0.009028172,0.0007149472,0.001013002,0.0009481184,0.0006668589,0.002770861,0.002158617,0.001485735,0.0007794746],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0008174311,"about_ca_system_score_gemma":0.001498536,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.005190324,"about_ca_topic_score_gemma":0.005100414,"domain_scores_codex":[0.9968503,0.0006759633,0.0001549723,0.0005312963,0.001499346,0.0002881927],"domain_scores_gemma":[0.9907121,0.005619181,0.000762351,0.001703208,0.0009534196,0.0002497328],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"bench_or_experimental","study_design_scores_codex":[0.002124089,0.001125139,0.08902132,0.000869562,0.0005487031,0.001488905,0.0006663864,0.05901815,0.2999299,0.01473704,0.0161414,0.5143294],"study_design_scores_gemma":[0.0001007518,0.0003131851,0.01312479,0.00004328188,0.00008398065,0.0005924121,0.00008080084,0.8492629,0.1242964,0.008673723,0.003349533,0.00007816913],"study_design_candidate":"bench_or_experimental","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.4121599,0.0009035016,0.4651893,0.0006125422,0.0001992721,0.0002563134,0.00154992,0.1157094,0.003419702],"genre_scores_gemma":[0.8465278,0.0001973675,0.1498812,0.0001395232,0.00003052395,0.0000764941,0.001013798,0.0007045146,0.001428714],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.005190324,"threshold_uncertainty_score":0.01032019,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2130537748","doi":"10.1109/cit.2011.103","title":"Effective SQL Injection Attack Reconstruction Using Network Recording","year":2011,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":17,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"Athabasca University","funders":"","keywords":"Computer security; SQL injection; Computer science; Web application; Web application security; Order (exchange); Confidentiality; Security awareness; Web service; Internet privacy; World Wide Web; Information security; Web development; Business","authors":[{"name":"Allen Pomeroy","is_ca":true},{"name":"Qing Tan","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.053542543402265,"gpt":0.2709699289561927,"spread":0.2174273855539277,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001079743,0.0007415017,0.0006872873,0.001321109,0.0004697933,0.001289428,0.0009051178,0.0008249183,0.001174352],"category_scores_gemma":[0.004964605,0.0003083404,0.0002882138,0.000593919,0.0005813579,0.002386405,0.001016332,0.00073164,0.0005157352],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0003247434,"about_ca_system_score_gemma":0.0005501303,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.001070151,"about_ca_topic_score_gemma":0.001262893,"domain_scores_codex":[0.9986614,0.0003571973,0.0001033167,0.0001792925,0.0005308465,0.000167986],"domain_scores_gemma":[0.9957277,0.001344474,0.0008045565,0.001332679,0.000576877,0.0002138196],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"bench_or_experimental","study_design_scores_codex":[0.0009877805,0.0004631049,0.009549472,0.0002000785,0.00008103182,0.0008216974,0.0007670049,0.04096498,0.1668095,0.004828306,0.003676224,0.7708508],"study_design_scores_gemma":[0.00005970106,0.0006635412,0.005934522,0.00006836031,0.0001332965,0.001900703,0.0005948623,0.7292216,0.2499613,0.003270336,0.008094143,0.0000975877],"study_design_candidate":"bench_or_experimental","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.2454774,0.0006056722,0.734268,0.0005528626,0.0000784699,0.0003300104,0.0001105531,0.01069941,0.007877548],"genre_scores_gemma":[0.8384182,0.0003843603,0.1582862,0.0000899119,0.00004137381,0.00006292578,0.0001844893,0.0001352437,0.002397384],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.001321109,"threshold_uncertainty_score":0.005710244,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2043780253","doi":"10.1007/s10664-010-9131-y","title":"An empirical investigation into open source web applications’ implementation vulnerabilities","year":2010,"lang":"en","type":"article","venue":"Empirical Software Engineering","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":16,"is_retracted":false,"has_abstract":false,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"University of Alberta","funders":"","keywords":"Open source; Computer science; World Wide Web; Web application; Empirical research; Computer security; Operating system; Software","authors":[{"name":"Toan Huynh","is_ca":true},{"name":"James Miller","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.02216853955675353,"gpt":0.3347690496519468,"spread":0.3126005100951932,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.005863429,0.0002562286,0.0001518755,0.003502252,0.001132582,0.001266936,0.0007109074,0.0009467788,0.002588243],"category_scores_gemma":[0.07508699,0.0004296454,0.0002277441,0.002676204,0.00194804,0.004475364,0.001654507,0.001790307,0.0003327828],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001061193,"about_ca_system_score_gemma":0.001839712,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.002408297,"about_ca_topic_score_gemma":0.004998652,"domain_scores_codex":[0.996326,0.001379477,0.000364998,0.0002998395,0.001234601,0.0003950497],"domain_scores_gemma":[0.8232154,0.1303769,0.02638196,0.006136296,0.01204327,0.00184613],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"observational","study_design_gemma":"observational","study_design_scores_codex":[0.0001988038,0.002155252,0.9353805,0.0001395028,0.00004792267,0.0007523447,0.01999744,0.000436193,0.002100236,0.006767641,0.0006900933,0.03133414],"study_design_scores_gemma":[0.00003753735,0.0006458322,0.9481562,0.0001633452,0.00006777658,0.001509438,0.03455397,0.004655705,0.003032181,0.003438513,0.003705351,0.00003423961],"study_design_candidate":"observational","study_design_consensus":"observational","genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.9976507,0.0000390395,0.0004799775,0.0001306461,0.000001428911,0.00002788676,0.00003403657,0.000006483665,0.001629843],"genre_scores_gemma":[0.9988996,0.00005390817,0.0005797139,0.00003753769,0.000002701461,0.00002639442,0.00005062803,0.000005773866,0.0003436934],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.005863429,"threshold_uncertainty_score":0.03100914,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W4403636726","doi":"10.1145/3697253.3697271","title":"StarQUIC: Tuning Congestion Control Algorithms for QUIC over LEO Satellite Networks","year":2024,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":15,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"University of Victoria; University of Toronto","funders":"","keywords":"Computer science; Network congestion; Satellite; Computer network; Algorithm; Engineering; Aerospace engineering","authors":[{"name":"Victor Kamel","is_ca":true},{"name":"Jinwei Zhao","is_ca":true},{"name":"Daoping Li","is_ca":true},{"name":"Jianping Pan","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.02113063797500468,"gpt":0.2868674820152841,"spread":0.2657368440402794,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.002839927,0.001105021,0.000676799,0.001249238,0.0008742627,0.001084122,0.00212835,0.0005869846,0.001635089],"category_scores_gemma":[0.007709263,0.0003578739,0.0001982581,0.000514594,0.000834957,0.0009774715,0.001111819,0.00112927,0.0002498528],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001624567,"about_ca_system_score_gemma":0.001597342,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.01033648,"about_ca_topic_score_gemma":0.009494664,"domain_scores_codex":[0.9990916,0.0002637052,0.00005769716,0.0001854786,0.0002185809,0.0001829526],"domain_scores_gemma":[0.9961073,0.00184727,0.0004348077,0.0004304129,0.0008459872,0.0003341806],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.001002372,0.0008989107,0.007762568,0.0002617859,0.0001311294,0.0001369901,0.0003001631,0.8011883,0.02646902,0.003920033,0.007515019,0.1504137],"study_design_scores_gemma":[0.00004597383,0.0001192509,0.0003920153,0.000004675501,0.000008417773,0.00001507281,0.00001979948,0.9944518,0.004137969,0.0003992998,0.0003945242,0.00001115103],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.4194157,0.0008141276,0.5458301,0.000426533,0.0003120383,0.0008225946,0.0003311948,0.02413206,0.007915606],"genre_scores_gemma":[0.9559419,0.0000681329,0.04272769,0.0001044398,0.00002079768,0.000130062,0.0001520593,0.0002418185,0.0006129987],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.01033648,"threshold_uncertainty_score":0.02055264,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2046529117","doi":"10.1109/iceccs.2013.36","title":"Protecting Web Browser Extensions from JavaScript Injection Attacks","year":2013,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":15,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false},"ca_institutions":"Queen's University","funders":"Natural Sciences and Engineering Research Council of Canada","keywords":"JavaScript; Computer science; Unobtrusive JavaScript; Computer security; Web application; Cross-site scripting; Web browser; Client-side scripting; Exploit; Backward compatibility; False positive paradox; Code (set theory); Web page; Web application security; Operating system; World Wide Web; Set (abstract data type); Rich Internet application; Programming language; The Internet; Web navigation; Web API; Web development","authors":[{"name":"Anton Barua","is_ca":true},{"name":"Mohammad Zulkernine","is_ca":true},{"name":"Komminist Weldemariam","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.01593034817214993,"gpt":0.2269103230495213,"spread":0.2109799748773714,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.002489578,0.0008791626,0.0008037167,0.001328448,0.0006346929,0.001562771,0.001107161,0.001451349,0.0007155491],"category_scores_gemma":[0.01021977,0.0008085071,0.0009570427,0.000488217,0.001140825,0.002710875,0.001536821,0.002162295,0.0007873902],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0005081592,"about_ca_system_score_gemma":0.001270534,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0005624997,"about_ca_topic_score_gemma":0.0006363198,"domain_scores_codex":[0.9967121,0.0008203214,0.0004099339,0.0004350609,0.001319824,0.0003028198],"domain_scores_gemma":[0.9860327,0.003620454,0.002188066,0.006333428,0.001573274,0.0002519824],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"bench_or_experimental","study_design_gemma":"bench_or_experimental","study_design_scores_codex":[0.0008293632,0.000818727,0.03064525,0.0005136616,0.0002539632,0.001834066,0.001551531,0.02090415,0.595015,0.02168189,0.004401475,0.321551],"study_design_scores_gemma":[0.0001450547,0.0007774716,0.01337973,0.0002604406,0.0003637261,0.004489911,0.0001330784,0.2398244,0.7065512,0.01371968,0.02005698,0.0002983874],"study_design_candidate":"bench_or_experimental","study_design_consensus":"bench_or_experimental","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.4033075,0.0008238954,0.5543389,0.0003714586,0.00009607583,0.0004561474,0.000169795,0.03455171,0.005884556],"genre_scores_gemma":[0.8819212,0.0002550164,0.1141673,0.0002530676,0.00003518765,0.0001086991,0.0001673282,0.001102666,0.001989583],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.002489578,"threshold_uncertainty_score":0.01316631,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2022941584","doi":"10.1145/1557626.1557643","title":"A verification framework for access control in dynamic web applications","year":2009,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":14,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"Queen's University","funders":"","keywords":"Computer science; Web application security; Access control; Role-based access control; Dynamic web page; Web modeling; Web application; Process (computing); Web engineering; Web service; Software engineering; Computer security; World Wide Web; Web development; Operating system","authors":[{"name":"Manar H. Alalfi","is_ca":true},{"name":"James R. Cordy","is_ca":true},{"name":"Thomas Dean","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.01663174061730677,"gpt":0.3302455407455204,"spread":0.3136138001282136,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.009735506,0.001349576,0.0011016,0.003097013,0.002071402,0.003909797,0.003178304,0.001832611,0.002930473],"category_scores_gemma":[0.009468909,0.001218225,0.004561738,0.001130939,0.004873428,0.006935268,0.003448532,0.004751058,0.0008507566],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.003167418,"about_ca_system_score_gemma":0.005679037,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.01155448,"about_ca_topic_score_gemma":0.005389414,"domain_scores_codex":[0.9916984,0.002076414,0.0007722672,0.001164814,0.003522988,0.0007652744],"domain_scores_gemma":[0.9939572,0.002556686,0.0004635513,0.001390551,0.001436858,0.0001951452],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"theoretical_or_conceptual","study_design_scores_codex":[0.00003644369,0.00007937331,0.000293859,0.0002237816,0.0000642126,0.0005167164,0.0004876945,0.03312214,0.007204878,0.9185883,0.001380921,0.03800172],"study_design_scores_gemma":[0.0000825007,0.0001221847,0.0003139598,0.0003397413,0.0001452934,0.0006413202,0.0001726842,0.3771566,0.01782588,0.5521021,0.05095539,0.0001423851],"study_design_candidate":"theoretical_or_conceptual","study_design_consensus":"theoretical_or_conceptual","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.001073645,0.0001392971,0.9965594,0.0002136226,0.00003375928,0.00009639208,0.00003644106,0.0006477112,0.001199702],"genre_scores_gemma":[0.1244558,0.0005945154,0.8711383,0.0002443034,0.0001533309,0.0004099587,0.0002357629,0.0002675215,0.002500551],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.01155448,"threshold_uncertainty_score":0.05148691,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2140339782","doi":"10.1109/icit.2012.6210016","title":"Using TTCN-3 as a modeling language for web penetration testing","year":2012,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":14,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"University of Ottawa","funders":"","keywords":"Computer science; Software engineering; Web application; Web testing; Web application security; Manual testing; White-box testing; Web service; Web development; World Wide Web; Software development; Programming language; Software; Software construction","authors":[{"name":"Bernard Stépien","is_ca":true},{"name":"Liam Peyton","is_ca":true},{"name":"Pulei Xiong","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.1399565873671311,"gpt":0.3557675824453241,"spread":0.215810995078193,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.002660541,0.001158005,0.0004411043,0.001305333,0.0004479363,0.001882481,0.001651859,0.001203811,0.002693748],"category_scores_gemma":[0.005196571,0.0005119613,0.001866661,0.0008338406,0.001161737,0.002151167,0.001224976,0.001892131,0.0005643562],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.002032352,"about_ca_system_score_gemma":0.003788035,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.01523614,"about_ca_topic_score_gemma":0.0134164,"domain_scores_codex":[0.9975878,0.0008196844,0.0002961014,0.0002242373,0.0008736556,0.0001985734],"domain_scores_gemma":[0.9959824,0.00174777,0.0006199982,0.0006873706,0.0008636301,0.00009877207],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0001995582,0.0003080291,0.00503103,0.0007151111,0.0001159885,0.0009931129,0.001067792,0.6067112,0.03341895,0.2860811,0.006282164,0.05907598],"study_design_scores_gemma":[0.00005133924,0.00016888,0.0007819372,0.0001934102,0.00008720042,0.0004222443,0.0001025052,0.8881894,0.02313692,0.03161338,0.05518161,0.00007117328],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.02421472,0.0001370838,0.9589218,0.000405468,0.00006818448,0.0005047963,0.0007994131,0.00485169,0.01009683],"genre_scores_gemma":[0.2564396,0.0005014448,0.7302792,0.0003661499,0.00003880684,0.001199338,0.00240711,0.001874259,0.006894101],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.01523614,"threshold_uncertainty_score":0.0302949,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2181718109","doi":"10.1109/iemcon.2015.7344461","title":"Evaluation of an OAuth 2.0 protocol implementation for web server applications","year":2015,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":13,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"Western University","funders":"","keywords":"Computer science; Server; Web server; Protocol (science); Authorization; Web application; Application server; Exploit; Web service; Computer security; World Wide Web; Database; The Internet","authors":[{"name":"Marwan Darwish","is_ca":true},{"name":"Abdelkader Ouda","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.1438534711366227,"gpt":0.4484205293009574,"spread":0.3045670581643347,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.01239557,0.001089024,0.0006059356,0.001474556,0.001380275,0.002351234,0.002945946,0.001654593,0.002438756],"category_scores_gemma":[0.03183088,0.0006410662,0.0005559254,0.0009765048,0.00153409,0.003819284,0.001420146,0.002209344,0.0009916697],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.002034868,"about_ca_system_score_gemma":0.003254715,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.006631708,"about_ca_topic_score_gemma":0.003665112,"domain_scores_codex":[0.9833339,0.005428527,0.00128661,0.000552885,0.008092869,0.001305193],"domain_scores_gemma":[0.976958,0.007000916,0.001506851,0.003574935,0.01001502,0.0009441818],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"bench_or_experimental","study_design_gemma":"bench_or_experimental","study_design_scores_codex":[0.01347523,0.009515747,0.04656271,0.005048568,0.0007870446,0.005567535,0.005478392,0.1000101,0.4115167,0.0644028,0.0401599,0.2974754],"study_design_scores_gemma":[0.001890965,0.0221388,0.03280797,0.001187337,0.00103778,0.002485554,0.003439286,0.4132734,0.4249618,0.005337084,0.09077714,0.0006629464],"study_design_candidate":"bench_or_experimental","study_design_consensus":"bench_or_experimental","genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.8855438,0.0006872888,0.06716599,0.001290547,0.0005348611,0.003260355,0.0004055654,0.01313864,0.02797298],"genre_scores_gemma":[0.9292893,0.0004968643,0.05846932,0.0003619643,0.0000535715,0.0006816974,0.0008131375,0.0009481254,0.008885976],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.01239557,"threshold_uncertainty_score":0.06555486,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W1979605461","doi":"10.1109/sere.2013.30","title":"Confeagle: Automated Analysis of Configuration Vulnerabilities in Web Applications","year":2013,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":12,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"Queen's University","funders":"","keywords":"Computer science; Vulnerability (computing); Usability; Web application; Web application security; Computer security; Secure coding; Cross-site scripting; Web server; Denial-of-service attack; Web service; World Wide Web; The Internet; Web development; Software security assurance; Information security; Operating system; Security service","authors":[{"name":"Birhanu Eshete","is_ca":false},{"name":"Adolfo Villafiorita","is_ca":false},{"name":"Komminist Weldemariam","is_ca":true},{"name":"Mohammad Zulkernine","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.01158782755666369,"gpt":0.2622271124417072,"spread":0.2506392848850435,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001537164,0.001219805,0.000604292,0.005018697,0.0005346409,0.001114051,0.001118588,0.0008335977,0.001112753],"category_scores_gemma":[0.006837891,0.0005128952,0.0005558594,0.001475476,0.0007852939,0.001961696,0.001629659,0.0006735094,0.000440587],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0006294232,"about_ca_system_score_gemma":0.001305266,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.004672482,"about_ca_topic_score_gemma":0.005448211,"domain_scores_codex":[0.9984947,0.0002905725,0.0001336714,0.0003806344,0.000547194,0.0001532507],"domain_scores_gemma":[0.9939688,0.002859263,0.000962533,0.001206874,0.0008303818,0.0001721661],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0006776265,0.0009980042,0.1209741,0.0008871948,0.0004423102,0.002098782,0.002041684,0.06314508,0.08553261,0.004095725,0.02506444,0.6940424],"study_design_scores_gemma":[0.00009104848,0.0004265882,0.05337551,0.0000757587,0.000083911,0.001454388,0.0003832056,0.8622018,0.07068796,0.004409872,0.006679217,0.0001308416],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"methods","genre_scores_codex":[0.5404347,0.0006406938,0.2643694,0.0003249483,0.00004834492,0.0006432866,0.002992799,0.1869637,0.003582207],"genre_scores_gemma":[0.790288,0.0001833106,0.2031765,0.0001276993,0.00001879126,0.0002069229,0.003092455,0.001605657,0.001300782],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.005018697,"threshold_uncertainty_score":0.009290516,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2136944226","doi":"10.1109/issre.2008.11","title":"Resolving JavaScript Vulnerabilities in the Browser Runtime","year":2008,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":12,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"University of Alberta","funders":"","keywords":"JavaScript; Computer science; Unobtrusive JavaScript; Scripting language; Web application; Cross-site scripting; Rich Internet application; Client-side scripting; Malware; Web application security; World Wide Web; The Internet; Dynamic web page; Static analysis; Web page; Computer security; Operating system; Web development; Web API; Programming language","authors":[{"name":"Ejike Ofuonye","is_ca":true},{"name":"James Miller","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.02911834255504793,"gpt":0.235798111504104,"spread":0.2066797689490561,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001008005,0.0003354796,0.0003691231,0.0007732604,0.0004799464,0.001169955,0.0005387635,0.0008081437,0.0003999484],"category_scores_gemma":[0.00663677,0.000376042,0.0002936835,0.0005321032,0.0008451581,0.001702243,0.0007175599,0.00116912,0.0003881466],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0004720046,"about_ca_system_score_gemma":0.0008749223,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.001381313,"about_ca_topic_score_gemma":0.001586541,"domain_scores_codex":[0.9986147,0.0003608482,0.00007674114,0.0001846708,0.0006300384,0.0001330215],"domain_scores_gemma":[0.9957035,0.001611736,0.0008194697,0.001194043,0.0004987142,0.0001724404],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"bench_or_experimental","study_design_gemma":"not_applicable","study_design_scores_codex":[0.0007693933,0.0009943654,0.1136047,0.0002589604,0.0001359848,0.00456382,0.003747576,0.02213211,0.521272,0.0111159,0.003742266,0.317663],"study_design_scores_gemma":[0.00007201609,0.0005688936,0.07911608,0.0001125754,0.0002897912,0.00714483,0.0007260492,0.4062209,0.4816285,0.01179728,0.01220633,0.0001168783],"study_design_candidate":"not_applicable","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.945686,0.0003279303,0.04353142,0.0001978659,0.0000164506,0.0000746534,0.00005079489,0.005765537,0.004349319],"genre_scores_gemma":[0.9838913,0.0001068938,0.01476523,0.00006012295,0.00000985534,0.00001397921,0.00007225482,0.0002463565,0.0008338994],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.001381313,"threshold_uncertainty_score":0.00533092,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W3124662913","doi":"10.1109/icdis50059.2020.00012","title":"An Analysis of Effectiveness of Black-Box Web Application Scanners in Detection of Stored SQL Injection and Stored XSS Vulnerabilities","year":2020,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":11,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"Concordia University of Edmonton","funders":"","keywords":"Cross-site scripting; Computer science; SQL injection; Scripting language; Black box; Web application; Database; JavaScript; SQL; Testbed; World Wide Web; Operating system; Web page; Web application security; Artificial intelligence; Web development; Query by Example","authors":[{"name":"Karthik Anagandula","is_ca":true},{"name":"Pavol Zavarsky","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.009062021449745111,"gpt":0.2501606827558739,"spread":0.2410986613061288,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001638475,0.0004872518,0.0005232912,0.001475362,0.0002408667,0.0005393532,0.0004212439,0.0005415255,0.001066286],"category_scores_gemma":[0.005631253,0.0001843912,0.0004262021,0.0006559054,0.0003213446,0.001478942,0.0002851154,0.0002850381,0.0002944469],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0004680029,"about_ca_system_score_gemma":0.0002966585,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.001514535,"about_ca_topic_score_gemma":0.001348001,"domain_scores_codex":[0.9980586,0.0005027446,0.000171126,0.0003431672,0.000694222,0.0002301632],"domain_scores_gemma":[0.9857712,0.009603065,0.001158129,0.001014615,0.002119857,0.0003332777],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"bench_or_experimental","study_design_scores_codex":[0.009152734,0.002566283,0.2571476,0.001125272,0.0006983312,0.00155254,0.0007448987,0.07386933,0.2800407,0.001912126,0.00331844,0.3678718],"study_design_scores_gemma":[0.00008605535,0.007463197,0.3157485,0.00006096706,0.0003701034,0.001395981,0.0005111705,0.4608492,0.2111007,0.0005444764,0.001739637,0.0001300788],"study_design_candidate":"bench_or_experimental","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.9944983,0.0004039429,0.003540236,0.00002991024,0.00001024149,0.00004192465,0.0001317844,0.0003772863,0.0009663107],"genre_scores_gemma":[0.9958302,0.0001070851,0.003281897,0.00001180252,0.000004672739,0.00001209259,0.0002095774,0.00002039361,0.0005223532],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.001638475,"threshold_uncertainty_score":0.008665144,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W4211142584","doi":"10.1109/cns53000.2021.9705049","title":"Securing APIs and Chaos Engineering","year":2021,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":11,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"Toronto Metropolitan University","funders":"","keywords":"Computer security; Computer science; Security through obscurity; Security engineering; Security testing; Cloud computing security; Security service; Authentication (law); Computer security model; CHAOS (operating system); Security information and event management; Cloud computing; Software security assurance; Information security","authors":[{"name":"Salah Sharieh","is_ca":true},{"name":"Alexander Ferworn","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.005175417743820499,"gpt":0.1854306198884628,"spread":0.1802552021446423,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.003618333,0.0007198827,0.0004582406,0.001484729,0.002136554,0.005988247,0.001112906,0.002371819,0.003543383],"category_scores_gemma":[0.01097609,0.0006804863,0.001024175,0.0006987673,0.008954109,0.01301511,0.005165846,0.004798056,0.001312785],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001590673,"about_ca_system_score_gemma":0.002368346,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.001854429,"about_ca_topic_score_gemma":0.000884249,"domain_scores_codex":[0.9967756,0.0009113814,0.0002139919,0.0005102765,0.001185656,0.0004031954],"domain_scores_gemma":[0.9912936,0.003454506,0.0008770851,0.002733216,0.001239413,0.0004022488],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"not_applicable","study_design_scores_codex":[0.00004385962,0.00005499708,0.001559189,0.0001792326,0.00003408245,0.0002840002,0.001435394,0.00652204,0.003855764,0.9337885,0.003975809,0.0482671],"study_design_scores_gemma":[0.00002706774,0.0001233848,0.000903189,0.000328357,0.00003993019,0.0005963353,0.0007888637,0.03274396,0.008598706,0.8322167,0.1235296,0.0001038681],"study_design_candidate":"not_applicable","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.04762977,0.006458831,0.8277517,0.03189196,0.001118135,0.0002498285,0.0001607674,0.002575046,0.08216396],"genre_scores_gemma":[0.7548112,0.007373927,0.2038192,0.004370628,0.0005564226,0.0004961531,0.0002138122,0.0007300007,0.02762865],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.005988247,"threshold_uncertainty_score":0.01913577,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2587146443","doi":"10.1145/3026724.3026742","title":"Causes and Prevention of SQL Injection Attacks in Web Applications","year":2016,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":10,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"University of Windsor","funders":"","keywords":"SQL injection; Computer science; SQL; Computer security; Web application; Web application security; World Wide Web; Database; Query by Example; Web development; Web page; Search engine","authors":[{"name":"Stephanos Mavromoustakos","is_ca":true},{"name":"Aakash Patel","is_ca":true},{"name":"Kinjal Chaudhary","is_ca":true},{"name":"Parth Chokshi","is_ca":true},{"name":"Shaili Patel","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.01733261551234155,"gpt":0.2804923000057187,"spread":0.2631596844933771,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001216967,0.000423866,0.0003807839,0.003619559,0.0007293956,0.001916084,0.0007125485,0.001103343,0.001454491],"category_scores_gemma":[0.008562195,0.0004057325,0.0005869584,0.001845641,0.0009058313,0.001640039,0.001047544,0.001246685,0.0006852911],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.000478334,"about_ca_system_score_gemma":0.0008447917,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0009389852,"about_ca_topic_score_gemma":0.0006125531,"domain_scores_codex":[0.9947903,0.0006992728,0.0003787474,0.0004666582,0.003198375,0.0004667039],"domain_scores_gemma":[0.9867241,0.005081797,0.003975487,0.001481063,0.002385323,0.0003523378],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"not_applicable","study_design_scores_codex":[0.0008361616,0.0008820609,0.3070855,0.001966057,0.0003264759,0.01046829,0.0047764,0.01157754,0.05161498,0.06350517,0.01399586,0.5329654],"study_design_scores_gemma":[0.000124059,0.001013758,0.4917713,0.002043934,0.001089246,0.07323826,0.004286665,0.0957694,0.1221052,0.0677093,0.1405406,0.0003082272],"study_design_candidate":"not_applicable","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.8763562,0.02391809,0.04754996,0.00305442,0.0002233065,0.0004540766,0.0006889253,0.002099654,0.04565527],"genre_scores_gemma":[0.9870791,0.003641147,0.006060511,0.0002659537,0.0001046086,0.00004420198,0.0001697474,0.00007013256,0.0025646],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.003619559,"threshold_uncertainty_score":0.00643599,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2063321466","doi":"10.5539/cis.v2n4p137","title":"Developing a Secure Web Application Using OWASP Guidelines","year":2009,"lang":"en","type":"article","venue":"Computer and Information Science","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":10,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":false,"ca_fund":false,"ca_venue":true,"about_ca":false},"ca_institutions":"","funders":"","keywords":"Computer science; Web application security; Guideline; Web application; Computer security; Secure coding; Trustworthiness; Software engineering; World Wide Web; Web development; Web service; Information security; Software security assurance; Security service","authors":[{"name":"Khairul Anwar Sedek","is_ca":false},{"name":"Norlis Osman","is_ca":false},{"name":"Mohd Nizam Osman","is_ca":false},{"name":"Hj. Kamaruzaman Jusoff","is_ca":false}],"retraction":null,"screen_n_in":null,"score":{"opus":0.04078477196900634,"gpt":0.3193129080276416,"spread":0.2785281360586353,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.003576683,0.0007110989,0.0003298564,0.001876152,0.00073493,0.001797687,0.001198177,0.001290307,0.003272424],"category_scores_gemma":[0.01614439,0.0003775269,0.0005102416,0.0007189812,0.0005518934,0.002042731,0.001415621,0.001058862,0.002472876],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0006132305,"about_ca_system_score_gemma":0.002784381,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.002206962,"about_ca_topic_score_gemma":0.004295672,"domain_scores_codex":[0.9950813,0.00134295,0.0006547836,0.0002175707,0.002450702,0.0002526894],"domain_scores_gemma":[0.9890088,0.002561445,0.001023539,0.001156207,0.005798129,0.0004519032],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"not_applicable","study_design_scores_codex":[0.0001419165,0.001394589,0.01567688,0.00186319,0.00004594184,0.003109037,0.005277161,0.01152712,0.07573174,0.03025996,0.04048344,0.8144891],"study_design_scores_gemma":[0.0001929435,0.002121698,0.04428796,0.004518567,0.0001588506,0.005763083,0.006328989,0.08597362,0.1363428,0.04815568,0.6657205,0.0004353741],"study_design_candidate":"not_applicable","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.1808343,0.0007497415,0.6809865,0.00479089,0.000222267,0.006710754,0.001079828,0.013267,0.1113586],"genre_scores_gemma":[0.1767007,0.0009594003,0.7981364,0.0006942052,0.00003134839,0.001623363,0.001335776,0.000571754,0.01994711],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.003576683,"threshold_uncertainty_score":0.01891553,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null}]}