http://www.owasp.org
http://perens.com/FreeSoftware/ModelSecurity/ - ModelSecurity helps Ruby on Rails developers implement a security defense in depth by implementing access control within the data model
Definitions
- A subject is an identity in a system that you want to authenticate and assign access rights to. A subject can be a human user, a process, or a machine and it is represented by the javax.security.auth.Subject class. Since a subject may interact with multiple authorities (one password for online banking and another for an email system), a java.security.Principal is used to represent the identity in those interactions. In other words, the Principal interface is an abstract notion that can be used to represent an entity, a company, or a login ID. A Subject may contain multiple Principles. An example class implementing the Principal interface will be shown later.
Reverse HTTP tunelling
