Using parse tree validation to prevent SQL injection attacks
Web application security assessment by fault injection and behavior monitoring