I saw the word "injecting" and it brought me to another point.  Is there an anti-virus solution that can detect SQL injection?  I know Oracle has been marketing its Database Firewall for some time now and I was wondering if there is a comparable solution for SQL Server.