-What are the first steps that you would take to test the sites for
SQL injection vulnerability?
-How might you apply the concept of inferential testing?
-What is your strategy for identifying dangerous source code now
and far into the future?
-What suggestions would you offer this law firm in reference to
their web clients?