Automatic Generation of XSS and SQL Injection Attacks with Goal-Directed Model Checking
Finding application errors and security flaws using PQL: a program query language