Ivan Bocic, Tevfik Bultan. Finding access control bugs in web applications with CanCheck. In David Lo, Sven Apel, Sarfraz Khurshid, editors, Proceedings of the 31st IEEE/ACM International Conference on Automated Software Engineering. pages 155-166, ACM, 2016. [doi]
Abstract is missing.