Using parse tree validation to prevent SQL injection attacks (2005)

by Gregory T. Buehrer, Bruce W. Weide, Paolo A. G. Sivilotti
Venue:In Proceedings of the International Workshop on Software Engineering and Middleware (SEM) at Joint FSE and ESEC