A Static Analysis Framework For Detecting SQL Injection Vulnerabilities
Web application security assessment by fault injection and behavior monitoring