Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Coding Practices and Recommendations of Spring Security for Enterprise
  Applications   Spring security is tremendously popular among practitioners for its ease of
use to secure enterprise applications. In this paper, we study the application
framework misconfiguration vulnerabilities in the light of Spring security,
which is relatively understudied in the existing literature. Towards that goal,
we identify 6 types of security anti-patterns and 4 insecure vulnerable
defaults by conducting a measurement-based approach on 28 Spring applications.
Our analysis shows that security risks associated with the identified security
anti-patterns and insecure defaults can leave the enterprise application
vulnerable to a wide range of high-risk attacks. To prevent these high-risk
attacks, we also provide recommendations for practitioners. Consequently, our
study has contributed one update to the official Spring security documentation
while other security issues identified in this study are being considered for
future major releases by Spring security community.

22
The categories of this paper are: chao-dyn
28
The categories of this paper are: alg-geom
15
The categories of this paper are: nucl-ex
31
The categories of this paper are: ao-sci
18
The categories of this paper are: econ
16
The categories of this paper are: stat
13
The categories of this paper are: quant-ph
12
The categories of this paper are: nucl-th
24
The categories of this paper are: dg-ga
34
The categories of this paper are: chem-ph
19
The categories of this paper are: eess
9
The categories of this paper are: nlin
10
The categories of this paper are: q-bio
27
The categories of this paper are: comp-gas
7
The categories of this paper are: hep-th
8
The categories of this paper are: hep-ex