Sruthi Bandhakavi Prithvi Bisht P. Madhusudan V. N. Venkatakrishnan CANDID: preventing sql injection attacks using dynamic candidate evaluations. 12-24 2007 ACM Conference on Computer and Communications Security http://doi.acm.org/10.1145/1315245.1315249 conf/ccs/2007 db/conf/ccs/ccs2007.html#BandhakaviBMV07