一作OSDI 2026Oral· Operating Systems & Distributed Systems
Extracting Database Access-Control Policies from Web Applications
Wen Zhang · Dev Bali · Jamison Kerney · Aurojit Panda · Scott Shenker
摘要
To safeguard sensitive user data, web developers typically rely on implicit access-control policies, which they implement using access checks and query filters. This ad hoc approach is error-prone as these scattered checks and filters are easy to misplace or misspecify, and the lack of an explici...