{"id":"W2130828213","doi":"10.1109/wcre.2012.34","title":"Fast Detection of Access Control Vulnerabilities in PHP Applications","year":2012,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":19,"is_retracted":false,"has_abstract":true,"ca_institutions":"Polytechnique Montréal","funders":"","keywords":"Computer science; SQL injection; Access control; Secure coding; Scripting language; Scalability; Cross-site scripting; Web application; Computer security; Web application security; Operating system; Information security; World Wide Web; The Internet; Software security assurance; Web development","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0005770169,0.0001038738,0.0001767717,0.000179146,0.00006231866,0.00006843336,0.0007558956,0.00005882093,0.00004528477],"category_scores_gemma":[0.00004523661,0.00009877712,0.00004684569,0.0005415424,0.00009298982,0.001330502,0.0001419809,0.0001203316,0.00003641797],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00006410365,"about_ca_system_score_gemma":0.00003488652,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0002263674,"about_ca_topic_score_gemma":0.000122124,"domain_scores_codex":[0.998833,0.0001050281,0.0003647939,0.0002291429,0.0002085393,0.0002595047],"domain_scores_gemma":[0.9987357,0.0003231852,0.000104232,0.0006442587,0.0001161532,0.00007648434],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"bench_or_experimental","study_design_scores_codex":[0.00001118559,0.0005325538,0.04292475,0.00009604052,0.00001580892,7.225645e-8,0.003286181,0.0003893857,0.01435004,0.8716688,0.00009128823,0.06663387],"study_design_scores_gemma":[0.003521367,0.0001923646,0.2516522,0.00003591131,0.00002715282,0.00002753461,0.002873451,0.05618804,0.5193051,0.1147906,0.0500285,0.001357747],"study_design_candidate":"theoretical_or_conceptual","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.06904943,0.0001279992,0.92343,0.0004248563,0.00007889303,0.0005553737,0.000004546657,0.0001439072,0.006185029],"genre_scores_gemma":[0.9955202,0.000004477101,0.003377987,0.0001607446,0.00007215252,0.0007234842,0.000001085876,0.000006128641,0.0001336975],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.9264708,"threshold_uncertainty_score":0.4028014,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.02216698525588525,"score_gpt":0.282508126285177,"score_spread":0.2603411410292918,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}