{"id":"W3207703975","doi":"10.1016/j.jss.2021.111109","title":"Automated reverse engineering of role-based access control policies of web applications","year":2021,"lang":"en","type":"article","venue":"Journal of Systems and Software","topic":"Access Control and Trust","field":"Social Sciences","cited_by":16,"is_retracted":false,"has_abstract":false,"ca_institutions":"University of Ottawa","funders":"Fonds National de la Recherche Luxembourg; National Research Foundation Singapore","keywords":"Correctness; Implementation; Computer science; Access control; Role-based access control; Software engineering; Security policy; Reverse engineering; Suite; Computer security; Database; Programming language","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0003776121,0.00006151283,0.0003319899,0.00009511563,0.00008876387,0.00006259412,0.0001638164,0.00006599652,0.00001185231],"category_scores_gemma":[0.0002370105,0.000051231,0.00008463273,0.0002260969,0.0000615075,0.0002052426,0.00001522128,0.00007515179,2.815634e-7],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00002452585,"about_ca_system_score_gemma":0.0003254429,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0007136855,"about_ca_topic_score_gemma":0.00006579871,"domain_scores_codex":[0.9990745,0.00006891198,0.0004257254,0.00005830526,0.0002627263,0.0001098504],"domain_scores_gemma":[0.9985392,0.0002138371,0.0004811687,0.00008268796,0.0005999317,0.00008316327],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"observational","study_design_gemma":"observational","study_design_scores_codex":[0.0002715058,0.0007500087,0.8399106,0.003560602,0.001450857,0.0001252476,0.01029606,0.06386175,0.02547878,0.03889688,0.002979811,0.01241784],"study_design_scores_gemma":[0.02967727,0.0008579324,0.4358614,0.008387649,0.00218879,0.0003053451,0.05784888,0.09279307,0.005632401,0.001350934,0.3629346,0.002161671],"study_design_candidate":"observational","study_design_consensus":"observational","genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.9204263,0.02103932,0.05327249,0.001941622,0.0008544762,0.0008176805,0.0002422654,0.0001941472,0.001211679],"genre_scores_gemma":[0.9994175,0.00009407991,0.0002480377,0.00002697533,0.0001578419,0.000006092241,7.495373e-7,0.000005354177,0.00004331752],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.4040492,"threshold_uncertainty_score":0.208914,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01251280664553687,"score_gpt":0.2849840260895453,"score_spread":0.2724712194440084,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}