SOFIA: an automated security oracle for black-box testing of SQL-injection vulnerabilities
Using parse tree validation to prevent SQL injection attacks