Web Application Security by SQL Injection DetectionTools
CANDID: Dynamic candidate evaluations for automatic prevention of SQL injection attacks