The attached slides were part of the presentation on web security I gave to the Philadelphia Area New Media Association (PANMA) in May 2010.  The presentation covered a brief overview of the types of threats that web applications face, how attackers break in, and a brief analysis of some attacker motivations.  The presentation also covered some defensive strategies developers can use to mitigate risk to their web applications.

Slides