in reply to Web Application Security Testing
A couple of recent Perl monks security nodes worth reading are: