2014 Internet Defense Prize Winner: Static Detection of Second-Order Vulnerabilities in Web Applications from Johannes Dahse and Thorsten Holz, Ruhr-University Bochum