Specific works on scripting languages:
* [Finding Bugs in Bash Scripts](http://www.cis.upenn.edu/~stevez/papers/MZ07.pdf) by Mazurak and Zdancewic
-* *Static detection of security vulnerabilities in scripting languages*, by Y. Xie and A. Aiken. In Proceedings of the 15th USENIX Security Symposium, July 2006.
+* *[Static detection of security vulnerabilities in scripting languages](http://theory.stanford.edu/~aiken/publications/papers/usenix06.pdf)*, by Y. Xie and A. Aiken. In Proceedings of the 15th USENIX Security Symposium, July 2006.
Misc stuff on static analysis which *might* be interesting: