Finding vulnerabilities by combining taint analysis and dynamic application security testing - Implementation of an IAST prototype