Kaiden is a security consultant for Banner Financial, a large mortgage lending company in Atlanta. He has been hired to raise the company DBA's awareness about SQL injections.

1. Kaiden is giving a speech on the four steps of exploitation. What four steps do you anticipate him including within his speech?
2. Kaiden is planning to describe at least three ways a database management system can be identified. What three ways for identifying a DBMS should he cover?
3. Kaiden plans to provide a few examples of SQL statements that can be used to gather information externally. Provide two examples of SQL statements that he can provide.
4. What suggestions do you expect Kaiden to provide for securing the company databases against SQL injections?