Lianshan Sun, Gang Huang, Hong Mei: Validating Access Control Configurations in J2EE Applications. CBSE 2008: 64-79