Michael Martin Monica S. Lam Automatic Generation of XSS and SQL Injection Attacks with Goal-Directed Model Checking. 31-44 2008 USENIX Security Symposium http://www.usenix.org/events/sec08/tech/full_papers/martin/martin.pdf conf/uss/2008 db/conf/uss/uss2008.html#MartinL08