Automated Black Box Detection of HTTP GET Request-based Access Control Vulnerabilities in Web Applications. - Malte Kushnir; Olivier Favre; Marc Rennhard; Damiano Esposito; Valentin Zahnd (ICISSP, 2021)

Automating the Detection of Access Control Vulnerabilities in Web Applications. - Marc Rennhard; Malte Kushnir; Olivier Favre; Damiano Esposito; Valentin Zahnd (SN Comput. Sci., 2022)