Comparison of SQL injection detection and prevention tools based on attack type and deployment requirements
CANDID: Dynamic candidate evaluations for automatic prevention of SQL injection attacks