CANDID: preventing sql injection attacks using dynamic candidate evaluations
AMNESIA: analysis and monitoring for NEutralizing SQL-injection attacks