Extracting Database Access-Control Policies From Web Applications

Wen Zhang, Dev Bali, Jamison Kerney +2

To safeguard sensitive user data, web developers typically rely on implicit access-control policies, which they implement using access checks and query filters. This ad hoc approac…