William G. J. Halfond, Alessandro Orso. Detection and Prevention of SQL Injection Attacks. In Mihai Christodorescu, Somesh Jha, Douglas Maughan, Dawn Song, Cliff Wang, editors, Malware Detection. Volume 27 of Advances in Information Security, pages 85-109, Springer, 2007. [doi]