Security testing aims at verifying that the software meets its security properties. In modern Web systems, however, this often entails verification of outputs generated when exercising system with a very large set inputs. Full automation is thus required to lower costs and increase effectiveness testing. Unfortunately, achieve such automation, in addition strategies for automatically deriving t...