Java Security

Hi,

I am trying to check if there is way I can check Insecure direct object references in my project,so that we can fix them.

Do you have any tool thats avaialable and does that work you..I read about the IBM appscan, but it does not have a trail version so that I can use with my project.

Please suggest me on how we can do this,instead of doing trail and error method on each url etc.

Thanks