Comparison of SQL injection detection and prevention tools based on attack type and deployment requirements
CANDID: preventing sql injection attacks using dynamic candidate evaluations