Collected research

MACE: Detecting Privilege Escalation Vulnerabilities in Web Applications

MACE: Detecting privilege escalation vulnerabilities in web applications for CCS 2014

Maliheh Monshizadeh, Prasad Naldurg and V.N. Venkatakrishnan · IBM Research

MACE infers a web application's intended access control from its own source by checking that authorization state is enforced consistently, so missing or incorrect checks stand out even without a written policy. Run over large codebases it found previously unknown privilege escalation bugs in five of seven applications, including a horizontal class where one user reaches another's data.

Record

Document

MACE: Detecting privilege escalation vulnerabilities in web applications for CCS 2014

Researcher

Maliheh Monshizadeh, Prasad Naldurg and V.N. Venkatakrishnan

Published by

IBM Research

Topic

Other

In the archive

• Collected in the 2014 research round

Tags

• privilege-escalation
• idor
• auth-bypass
• static-analysis
• tooling
• owasp-a01-2021

This page is the archive's own catalogue record. The research is the work of Maliheh Monshizadeh, Prasad Naldurg and V.N. Venkatakrishnan, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 8 August 2026.