Domanda di colloquio di ReliaQuest

How could you identify a SQL injection attack, how could you create a rule using log rhythm, etc.