4. EVALUATION
To evaluate our approach, we developed a prototype tool
that implements our technique and used this tool to detect
SQLIAs on two small web applications. The following sections
present the tool, illustrate the setup for our evaluation,
and discuss our results.