A Weight-Based Symptom Correlation Approach to SQL Injection Attacks