Web Attacks: cross-site request forgery, SQL injection, cross-site scripting
slide Big trend: software as a Web-based service Online banking, shopping, government, bill payment, tax prep, customer relationship management, etc. Cloud-hosted applications Application code split between client and server Client (