Generalized vulnerability extrapolation using abstract syntax trees
Pixy: a static analysis tool for detecting Web application vulnerabilities