The main one in the article:<p><a href="http:&#x2F;&#x2F;www.cs.berkeley.edu&#x2F;~jnear&#x2F;space&#x2F;" rel="nofollow">http:&#x2F;&#x2F;www.cs.berkeley.edu&#x2F;~jnear&#x2F;space&#x2F;</a><p>&quot;SPACE is a specification-free tool for finding missing security checks in Ruby on Rails web applications using a catalog of access control patterns in which each pattern models a common access control use case. SPACE checks that for every kind of data exposure allowed by an application&#x27;s code, some security pattern in our catalog also allows the exposure. The user provides a mapping from application types to the types of our catalog, and then SPACE identifies security bugs automatically.&quot;<p>The paper referenced:<p><a href="https:&#x2F;&#x2F;dspace.mit.edu&#x2F;bitstream&#x2F;handle&#x2F;1721.1&#x2F;99841&#x2F;927410712-MIT.pdf" rel="nofollow">https:&#x2F;&#x2F;dspace.mit.edu&#x2F;bitstream&#x2F;handle&#x2F;1721.1&#x2F;99841&#x2F;9274107...</a>