Using parse tree validation to prevent SQL injection attacks
Combining static analysis and runtime monitoring to counter SQL-injection attacks