Extracting Database Access-control Policies From Web Applications

Wen Zhang, Dev Bali, and Jamison Kerney, UC Berkeley; Aurojit Panda, NYU; Scott Shenker, UC Berkeley and ICSI