Engineering Secure Software and Systems
Static detection of security vulnerabilities in scripting languages