Evaluating and Improving Penetration Testing in Web Services
AMNESIA: analysis and monitoring for NEutralizing SQL-injection attacks