SQL Injection Attacks and Defense - 2009

Lead Author and Technical Editor
Justin Clarke is a co-founder and Director of Gotham Digital Science, an information
security consulting firm that works with clients to identify, prevent, and manage security
risks. He has over twelve years’ experience in testing the security of networks, web
applications, and wireless networks for large financial, retail, and technology clients in
the United States, United Kingdom and New Zealand.
Justin is a contributing author to a number of computer security books, as well as
a speaker at many conferences and events on security topics, including Black Hat USA,
EuSecWest, OSCON, ISACA, RSA, SANS, OWASP, and the British Computer Society.
He is the author of the Open Source SQLBrute blind SQL injection exploitation tool,
and is the Chapter Leader for the London chapter of OWASP.
iii