State of the Art: Automated Black-Box Web Application Vulnerability Testing
Sound and precise analysis of web applications for injection vulnerabilities