Microsoft is pushing freeware to help combat SQL injection attacks. Microsoft is promoting newly released freeware to help IT pros put up a fight against SQL injection attacks.
The release of the products comes at a time when news of legitimate Web sites being compromised by SQL injections has become familiar in the headlines. Microsoft announced these products" availability June 24 in a security advisory. Two of the tools, UrlScan Version 3.0 Beta and Microsoft Source Code Analyzer for SQL Injection Community Technology Preview, are the sole fruits of Microsoft. The third, a Web site scanner called HP Scrawlr, was developed by Hewlett-Packard"s Web Security Research Group in conjunction with Microsoft.