NOTE FROM CLEMENT:
These two videos are very nice videos that demonstrate in simple terms what SQL Injections are and also what is Parameter Tampering.  It is not for the purpose to learn everything there is to know about the subject,  that would take weeks,  the goal is to educate people and developers on the issue.   They are great because of their short length and I like the animations as well.   One picture is worth a thousand words they say.  In this case on minute of video clip is worth 10 minutes of talks.    I will most certainly use them in some of my classes.  Job well done.   Clement

One of the biggest challenges of the security community is to build true SDLC (Secure development Life Cycle).

The biggest obstacle is that application developers at large lack the know-how and motivation to address application risk. 

At Checkmarx labs we thought that a new approach to application developers might help them cross the barrier.
We have developed as a pilot including two short animated clips that should help developers understand security flaws, how they can be detected and consequently prevented.

We built one clip for SQL Injection and another for Parameter Tampering - limited up to 5 minutes each.

We would appreciate feedback from the OWASP community whether the effort is meaningful and should it be extended.

Please feel free to use the clips freely.

The clips can be found at:

SQL Injection : http://www.youtube.com/watch?v=vjDrseRLyuA&hd=1

Parameter Tampering: http://www.youtube.com/watch?v=l5LCDEDn7FY&hd=1

Yours,

Maty Siman, CISSP
CTO
Checkmarx