“That's a hard, fundamentally hard problem to solve when you don't live in the application and you don't have access to the dataset.”

Transcript evidence from John Melton -- #OWASP AppSensor.