ReliaQuest interview question

How could you identify a SQL injection attack, how could you create a rule using log rhythm, etc.