CANDID: preventing sql injection attacks using dynamic candidate evaluations
Taint-enhanced policy enforcement: A practical approach to defeat a wide range of attacks