A Classification of SQL Injection Attacks and countermeasure Halfond,W.,J.Viegas,etal.(2006).AclassificationofSQL-injectionattacksandcountermeasures.对SQL注入攻击的不同手段、不同目的和防御方法进行了整理
AdvancedSQLinjectiontooperatingsystemfullcontrol Guimarães, B. (2009). "Advanced SQL injection to operating system full control."