Automatic Generation of XSS and SQL Injection Attacks with Goal-Directed Model Checking
Sound and precise analysis of web applications for injection vulnerabilities