Jedi mind tricks for building application security programs
Agnitio: It’s static analysis, but not as know it
Injecting simplicity not SQL BSides Las Vegas 2010
DEF CON 17 Part 2 of 5