Finding application errors and security flaws using PQL: a program query language
Securing web application code by static analysis and runtime protection