The essence of command injection attacks in web applications
AMNESIA: analysis and monitoring for NEutralizing SQL-injection attacks