WASP: Protecting Web Applications Using Positive Tainting and Syntax-Aware Evaluation. - Halfond, William G. J.; Orso, Alessandro; Manolios, Panagiotis (IEEE Transactions on Software Engineering, 2008)