RA-SFAD: Role-Aware Session Fingerprinting and Anomaly Detection for Web Application Security
Role-Based Access Control (RBAC) is widely used in web applications to regulate user permissions and resource access. Although effective at authorization, RBAC does not evaluate whether the behavior within an authenticated session is legitimate. As a result, threats such as credential misuse, insider attacks, and sessi...