This paper provides an analysis of online identity theft. It identifies the top five online identity theft attack methodologies used by attackers to compromise Web applications. For each methodology the paper also provides a description of the technology employed by Imperva's SecureSphere Web Application Firewall to defeat the threat.