Web application vulnerabilities put critical business applications and back-end databases at risk from attack, theft, and fraud. The Payment Card Industry Data Security Standard (PCI DSS, or PCI), which recognizes the threat Web application vulnerabilities pose to credit card data, allows organizations to choose between two mitigation techniques. Requirement 6.6 of PCI DSS specifies the…