@inproceedings{su2006eci,
  title={{The essence of command injection attacks in web applications}},
  author={Zhendong Su and Gary Wassermann},
  booktitle={Proceedings of the 33rd Annual Symposium on Principles of Programming Languages},
  pages={372--382},
  address={Charleston, SC},
  month=jan,
  year={2006},
  publisher={ACM Press New York, NY, USA}
}