From skimming the papers briefly* it looks it&#x27;s finding errors in policy-scoping and other violations outside of expected permission branches.<p>The thesis isn&#x27;t linked on the site but I found it here<i></i>
[0] <a href="http:&#x2F;&#x2F;www.cs.berkeley.edu&#x2F;~jnear&#x2F;" rel="nofollow">http:&#x2F;&#x2F;www.cs.berkeley.edu&#x2F;~jnear&#x2F;</a>
[1] <a href="https:&#x2F;&#x2F;dspace.mit.edu&#x2F;handle&#x2F;1721.1&#x2F;99841" rel="nofollow">https:&#x2F;&#x2F;dspace.mit.edu&#x2F;handle&#x2F;1721.1&#x2F;99841</a>