Insufficient Logging and Monitoring

Check out the OWASP AppSensor project for ideas on how to monitor applications and react in real time to attacks.