Defeating SQL Injection
CANDID: Dynamic candidate evaluations for automatic prevention of SQL injection attacks