Update README.md

Author: jbarach2012

README.md

@@ -7,6 +7,8 @@ another's records — the Broken Object Level Authorization (BOLA/IDOR) flaw cla
 behind incidents like McHire. It's driven by the target's OpenAPI spec and returns
 a non-zero exit code so it can gate your CI build.
 
+
+
 <!-- After you create the repo -->
 ![ci](https://github.com/jbarach2012/AuthProbe/actions/workflows/ci.yml/badge.svg)
 [![License: Apache 2.0](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](LICENSE)
@@ -123,6 +125,10 @@ caught before production.
 [CI integration](docs/02-ci-integration.md) · [Security policy](SECURITY.md) ·
 [Roadmap](ROADMAP.md)
 
+## Paper 
+
+The paper for this project can be found here. https://doi.org/10.48550/arXiv.2607.20574 
+
 ## License
 
 [Apache 2.0](LICENSE). AuthProbe is a defensive testing tool; use it responsibly