Combining static analysis and runtime monitoring to counter SQL-injection attacks
Web application security assessment by fault injection and behavior monitoring