How are todays bad guys attacking web sites to steal important data?
From what we have seen and studied, SQL injection remains the number one attack vector, accounting for nearly one-fifth of all data breaches according to our 2009 Web Hacking Incident Database (WHID) report for the first half of 2009. These attacks alter the contents of the back-end database and inject malicious JavaScript which enables the bad guys to get their hands on important data like credit card numbers and things like that. And while this may sound like inside baseball, imagine that you are in charge of the physical security for a bank. You spare no expense to buy and install the latest cutting-edge technology including; secure and fire resistant vaults, bullet proof glass to protect the tellers, closed-circuit video cameras and silent alarms to notify police. It will be next to impossible for someone to walk into your bank and be able to steal any money. What you didn’t account for, however, is that it is possible for someone to use the ATM outside the bank to extract thousand
