JDBC Checker: A Static Analysis Tool for SQL/JDBC Applications

Combining static analysis and runtime monitoring to counter SQL-injection attacks

WODA '05 Proceedings of the third international workshop on Dynamic analysis

AMNESIA: analysis and monitoring for NEutralizing SQL-injection attacks

Proceedings of the 20th IEEE/ACM international Conference on Automated software engineering

Using parse tree validation to prevent SQL injection attacks

SEM '05 Proceedings of the 5th international workshop on Software engineering and middleware

String analysis for x86 binaries

PASTE '05 Proceedings of the 6th ACM SIGPLAN-SIGSOFT workshop on Program analysis for software tools and engineering

Using positive tainting and syntax-aware evaluation to counter SQL injection attacks

Proceedings of the 14th ACM SIGSOFT international symposium on Foundations of software engineering

Dynamic test input generation for database applications

Proceedings of the 2007 international symposium on Software testing and analysis

Preventing injection attacks with syntax embeddings

GPCE '07 Proceedings of the 6th international conference on Generative programming and component engineering

A vulnerabilities analysis and corresponding middleware security extensions for securing NGN applications

Computer Networks: The International Journal of Computer and Telecommunications Networking

SQLProb: a proxy-based architecture towards preventing SQL injection attacks

Proceedings of the 2009 ACM symposium on Applied Computing

Improving static resolution of dynamic class loading in Java using dynamically gathered environment information

Automated Software Engineering

Preventing injection attacks with syntax embeddings

Science of Computer Programming

Analysis of different technique for detection of SQL injection

Proceedings of the International Conference & Workshop on Emerging Trends in Technology

Model based hybrid approach to prevent SQL injection attacks in PHP

InfoSecHiComNet'11 Proceedings of the First international conference on Security aspects in information technology

PSIAQOP: preventing SQL injection attacks based on query optimization process

Proceedings of the Second Kuwait Conference on e-Services and e-Systems

MetaBorg in action: examples of domain-specific language embedding and assimilation using Stratego/XT

GTTSE'05 Proceedings of the 2005 international conference on Generative and Transformational Techniques in Software Engineering