A Classification of SQL Injection Attacks and Countermeasures. - William G. J. Halfond; Jeremy Viegas; Alessandro Orso (ISSSE, 2006)