Penetration Testing and Network Defense

http://www.appsecinc.com/techdocs/whitepapers/research.html

http://www.microsoft.com/technet/prodtechnol/sql/2000/maintain/sp3sec00.mspx

http://www.ngssoftware.com

http://www.petefinnigan.com/orasec.htm

http://www.sans.org/rr/whitepapers/application/

http://www.spidynamics.com/papers/SQLInjectionWhitePaper.pdf