{"id":"W2130828213","doi":"10.1109/wcre.2012.34","title":"Fast Detection of Access Control Vulnerabilities in PHP Applications","year":2012,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":19,"is_retracted":false,"has_abstract":true,"ca_institutions":"Polytechnique Montréal","funders":"","keywords":"Computer science; SQL injection; Access control; Secure coding; Scripting language; Scalability; Cross-site scripting; Web application; Computer security; Web application security; Operating system; Information security; World Wide Web; The Internet; Software security assurance; Web development","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001653636,0.001025781,0.0007453273,0.002588885,0.0005530764,0.001454505,0.0012368,0.001060076,0.001894383],"category_scores_gemma":[0.009028172,0.0007149472,0.001013002,0.0009481184,0.0006668589,0.002770861,0.002158617,0.001485735,0.0007794746],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0008174311,"about_ca_system_score_gemma":0.001498536,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.005190324,"about_ca_topic_score_gemma":0.005100414,"domain_scores_codex":[0.9968503,0.0006759633,0.0001549723,0.0005312963,0.001499346,0.0002881927],"domain_scores_gemma":[0.9907121,0.005619181,0.000762351,0.001703208,0.0009534196,0.0002497328],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"bench_or_experimental","study_design_scores_codex":[0.002124089,0.001125139,0.08902132,0.000869562,0.0005487031,0.001488905,0.0006663864,0.05901815,0.2999299,0.01473704,0.0161414,0.5143294],"study_design_scores_gemma":[0.0001007518,0.0003131851,0.01312479,0.00004328188,0.00008398065,0.0005924121,0.00008080084,0.8492629,0.1242964,0.008673723,0.003349533,0.00007816913],"study_design_candidate":"bench_or_experimental","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.4121599,0.0009035016,0.4651893,0.0006125422,0.0001992721,0.0002563134,0.00154992,0.1157094,0.003419702],"genre_scores_gemma":[0.8465278,0.0001973675,0.1498812,0.0001395232,0.00003052395,0.0000764941,0.001013798,0.0007045146,0.001428714],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.005190324,"threshold_uncertainty_score":0.01032019,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.02216698525588525,"score_gpt":0.282508126285177,"score_spread":0.2603411410292918,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}