CANDID: Dynamic candidate evaluations for automatic prevention of SQL injection attacks
XSS-GUARD : Precise Dynamic Prevention of Cross-Site Scripting Attacks