A survey on SQL injection: Vulnerabilities, attacks, and prevention techniques
CANDID: Dynamic candidate evaluations for automatic prevention of SQL injection attacks