Using positive tainting and syntax-aware evaluation to counter SQL injection attacks
Web application security assessment by fault injection and behavior monitoring