{"id":"W3207703975","doi":"10.1016/j.jss.2021.111109","title":"Automated reverse engineering of role-based access control policies of web applications","year":2021,"lang":"en","type":"article","venue":"Journal of Systems and Software","topic":"Access Control and Trust","field":"Social Sciences","cited_by":16,"is_retracted":false,"has_abstract":false,"ca_institutions":"University of Ottawa","funders":"Fonds National de la Recherche Luxembourg; National Research Foundation Singapore","keywords":"Correctness; Implementation; Computer science; Access control; Role-based access control; Software engineering; Security policy; Reverse engineering; Suite; Computer security; Database; Programming language","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0103339,0.0008748314,0.00105332,0.001773261,0.001142343,0.003920145,0.00224824,0.001647539,0.002124402],"category_scores_gemma":[0.04669379,0.0009632936,0.002000122,0.0006822512,0.001876447,0.003905356,0.002762735,0.003633657,0.00095677],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001606984,"about_ca_system_score_gemma":0.005679573,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.007872236,"about_ca_topic_score_gemma":0.0095907,"domain_scores_codex":[0.982985,0.006836023,0.001270745,0.001594046,0.005712446,0.001601822],"domain_scores_gemma":[0.9356495,0.03108514,0.003356262,0.02043267,0.008821077,0.000655234],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"bench_or_experimental","study_design_scores_codex":[0.001569354,0.001592386,0.02386986,0.0009030033,0.0003763597,0.001543467,0.002144269,0.1565668,0.1013179,0.08772372,0.009203758,0.6131891],"study_design_scores_gemma":[0.00009501674,0.0001682004,0.001645725,0.00008995146,0.0001440284,0.0004648833,0.0003066055,0.8744393,0.07849751,0.03738241,0.006682012,0.00008446902],"study_design_candidate":"bench_or_experimental","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.1780369,0.0005506756,0.7956178,0.0009506776,0.000244171,0.0008564927,0.0003943714,0.01927538,0.004073527],"genre_scores_gemma":[0.7781143,0.0002377009,0.2166934,0.0002771922,0.00004227173,0.0001485082,0.0006282447,0.0009845186,0.002873753],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.0103339,"threshold_uncertainty_score":0.05465162,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01251280664553687,"score_gpt":0.2849840260895453,"score_spread":0.2724712194440084,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}