CANDID: preventing sql injection attacks using dynamic candidate evaluations
SQLrand: Preventing SQL Injection Attacks