IDORacle: Template-guided data-access mediation for object-level authorization in database-backed applications
Authors:
- Yuewantong SongYSYuewantong Song
- Guanhang ShiGSGuanhang Shi
- Yin CaiYCYin Cai
- Changhui WangCWChanghui Wang
- Jin WeiJWJin Wei
- Ping ChenPCPing Chen
- Lei ShiLei Shi
- Jiangxing WuJWJiangxing Wu
- 9 September 2026
- journal article
- Published by Elsevier in Computers & Security
- Vol. 172
Abstract
No abstract availableAll Related Versions
This publication has 5 references indexed in Scilit:
- DRacv: Detecting and auto-repairing vulnerabilities in role-based access control in web applicationJournal of Network and Computer Applications, 2025
- A2CT: Automated Detection of Function and Object-Level Access Control Vulnerabilities in Web Applications2025
- SieveProceedings of the VLDB Endowment, 2020
- SEQUOIA: A Middleware Supporting Policy-Based Access Control for Search and Aggregation in Data-Driven ApplicationsIEEE Transactions on Dependable and Secure Computing, 2018
- Role-based access control modelsComputer, 1996