1. A survey on webshell: game of detection and escape[J];Xiao Long;Cyberspace Security,2018
2. Martin M Lam M S. Automatic generation of XSS and SQL injection attacks with goal-directed model checking[C]. San Jose CA United states: USENIX Association 2008. Martin M Lam M S. Automatic generation of XSS and SQL injection attacks with goal-directed model checking[C]. San Jose CA United states: USENIX Association 2008.
3. Saner: Composing static and dynamic analysis to validate sanitization in web applications[C]. Oakland, CA, United states: Institute of Electrical and Electronics Engineers Inc., 2008. R. Nicole, "Title of paper with only first word capitalized;Balzarotti;J. Name Stand. Abbrev., in press.