SMask: preventing injection attacks in web applications by approximating automatic data/code separation. - Martin Johns; Christian Beyerlein (SAC, 2007)

Secure Code Generation for Web Applications. - Martin Johns; Christian Beyerlein; Rosemaria Giesecke; Joachim Posegga (ESSoS, 2010)