SQL-IDS: a specification-based approach for SQL-injection detection
The essence of command injection attacks in web applications