The essence of command injection attacks in web applications
Web application security assessment by fault injection and behavior monitoring