Nenad Jovanovic Christopher Kruegel Engin Kirda Precise alias analysis for static detection of web application vulnerabilities. 27-36 2006 PLAS http://doi.acm.org/10.1145/1134744.1134751 conf/pldi/2006plas db/conf/pldi/plas2006.html#JovanovicKK06