Language-theoretic security was the first thing that came to mind when I read the title. Was pleasantly surprised to see it referenced at the end of the article.

http://langsec.org

The idea is to formally specify the structure of inputs and reject invalid data instead of trying to process it.