A Non-Intrusive Traffic Analysis Framework for Authorization Risk Detection and Coordinated Response in Web Applications

arXiv:2607.16754 · cs.SE, cs.CR · Submitted 2026-07-18 · Read on arXiv

Siqi Lin, Yuchao Luo, Zihan Zhu, Yiran Wang, Borui Qiu

cs.SE, cs.CR

Submitted: 2026-07-18

Comments: 25 pages; bilingual English-Chinese version. The complete English version is followed by the complete Chinese version; each version contains 3 figures and 5 tables

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

• Accuracy — 10× in this paper · explained in 1 episode
• F1 Score — 10× in this paper · explained in 3 episodes
• Ablation — 9× in this paper · explained in 1 episode
• Consistency — 6× in this paper · explained in 3 episodes
• Broken Object Level Authorization — 4× in this paper
• Role-Based Access Control — 2× in this paper
• Ablation study — 1× in this paper · explained in 1 episode
• Abstraction — 1× in this paper · explained in 1 episode
• Attribute-Based Access Control — 1× in this paper
• International Conference on Software Engineering — 1× in this paper
• State Management — 1× in this paper · explained in 3 episodes
• Trace — 1× in this paper · explained in 2 episodes

Related papers

• Falsification-Based Verification of LLM-Generated Optimization Models: Sound Test Batteries and Their Detection Limits
• GitSkills: A Dataset of Agent Skills on GitHub
• SABER: Benchmarking Operational Safety of LLM Coding Agents in Stateful Project Workspaces
• PackMonitor: Enabling Zero Package Hallucinations Through Decoding-Time Monitoring
• IntentCoding: Amplifying User Intent in Code Generation
• Incentives and Outcomes in Bug Bounties