Leveraging "choice" to automate authorization hook placement
Divya Muthukumaran, Trent Jaeger, Vinod Ganapathy · 2012
When servers manage resources on behalf of multiple, mutually-distrusting clients, they must mediate access to those resources to ensure that each client request complies with an authorization policy. This goal is typically achieved by placing authorization hooks at appropriate locations in server code. The goal of authorization hook placement is to completely mediate all security-sensitive operations on shared resources.