WAVE: Black Box Detection of XSS, CSRF and Information Leakage Vulnerabilities. - Hamed Soleimani; Mohammad Ali Hadavi; Arash Bagherdaei (ISCISC, 2017)

IDOT: Black-Box Detection of Access Control Violations in Web Applications. - Mohammad Ali Hadavi; Arash Bagherdaei; Simin Ghasemi (ISC Int. J. Inf. Secur., 2021)