SOFIA: an automated security oracle for black-box testing of SQL-injection vulnerabilities
a classification of sql - injection attacks and countermeasures .