Generalized vulnerability extrapolation using abstract syntax trees
Finding Security Vulnerabilities in Java Applications with Static Analysis