R. Sekar An Efficient Black-box Technique for Defeating Web Application Attacks. 2009 NDSS http://www.isoc.org/isoc/conferences/ndss/09/pdf/02.pdf conf/ndss/2009 db/conf/ndss/ndss2009.html#Sekar09