Self-curated dataset for automated detection of broken access control in REST API endpoints using AI-based testing agents

This item contains the self-curated dataset used in the study titled “Automated detection of broken access control in REST API endpoints using AI-based testing agents.” The dataset was assembled to support automated security testing of REST API endpoints in an Employee Self Service (ESS) application, with a focus on detecting Insecure Direct Object Reference (IDOR) and Broken Object Level Authorization (BOLA) vulnerabilities.The dataset includes structured system artifacts used by the testing agent to generate and execute authorization test scenarios, including API specifications, role definitions, permission mappings, and RBAC relationships.