Here is an absolutely incredible video regarding web application security that is easy to understand by laymen and computer security experts alike.

Believe me, it is worth the 55 minutes spent to see this. Grossman and Ford explore different black hat attacks across a wide scale of targets such as online polls, coupon providers, and banks while explaining that tradition antihacking and intrusion detection systems fail to recognize these attacks.