SQL injection attacks and defense (Elsevier, 2012)