Diglossia
Sooel Son, Kathryn S. McKinley, Vitaly Shmatikov · 2013
Code injection attacks continue to plague applications that incorporate user input into executable programs. For example, SQL injection vulnerabilities rank fourth among all bugs reported in CVE, yet all previously proposed methods for detecting SQL injection attacks suffer from false positives and false negatives.