An empirical evaluation of a language-based security testing technique. - Muhammad AboElFotoh; Thomas Dean; Ryan Mayor (CASCON, 2009)