Preventing SQL injection attacks in stored procedures
Combining static analysis and runtime monitoring to counter SQL-injection attacks