Analyzing and defending against web-based malware
Static detection of security vulnerabilities in scripting languages