SQL Injection Attacks and Defense - "Justin, Clarke-Salt" (London, 2012)