Automatically fixing security vulnerabilities in Java code
Aharon Abadi, Ran Ettinger, Yishai Feldman, Mati Shomrat · 2011
Most kinds of security vulnerabilities in web applications can be fixed by adding appropriate sanitization methods. Finding the correct place for the sanitizers can be difficult due to complicated data and control flow. Fixing SQL injection vulnerabilities may require more complex transformations, such as replacing uses of Statement by PreparedStatement, which could include some code motion.