You have been hired as the security consultant for a law firm. As your first task, you have been asked to complete a security audit of their web applications. Answer the following questions in your research paper:

What are the first steps that you would take to test the sites for SQL injection vulnerability?

How might you apply the concept of inferential testing?

What is your strategy for identifying dangerous source code now and far into the future?

What suggestions would you offer this law firm in reference to their web clients?