EvilCoder: automated bug insertion
Finding Security Vulnerabilities in Java Applications with Static Analysis