An Analysis of Black-Box Web Application Security Scanners against Stored SQL Injection. - Nidal Khoury; Pavol Zavarsky; Dale Lindskog; Ron Ruhl (SocialCom/PASSAT, 2011)

Analysis of effectiveness of black-box web application scanners in detection of stored SQL injection and stored XSS vulnerabilities. - Muhammad Parvez; Pavol Zavarsky; Nidal Khoury (ICITST, 2015)