Comparing static bug finders and statistical prediction
Sound and precise analysis of web applications for injection vulnerabilities