Understand this: the motivation for hacking application servers has not changed. Hackers are out to steal information, goods, and services¡ªanything that is easily converted to cash. It is only their techniques that have changed: increasingly they are attacking the application logic itself, rather than weaknesses in the operating system or the Web server. Attacking application logic is proving to be a successful new strategy that is still highly effective today.