Technology Alone Cannot Defeat Website Attacks: Understanding Technical Vs. Logical Website Vulnerabilities

Hackers behave like water, taking the path of least resistance. Today this path leads over SSL, and past the firewall, where nothing exists between them, the website, and the information it holds. This is how a Web hacker views the world. Using a browser and a few simple tricks, hackers can penetrate a website, access the credit card database, and make off with critical data, customer databases or even intranet information, unseen.

http://whitepapers.zdnet.com/abstract.aspx?docid=1296565