SQL-IDS: a specification-based approach for SQL-injection detection
Securing web application code by static analysis and runtime protection