Core Security Patterns: Best Practices and Strategies for J2EE, Web Services, and Identity Management

Chapter 8.  The Alchemy of Security DesignMethodology, Patterns, and Reality Checks