State of Web Application Security by Ponemon Institute
Application Portfolio Risk Ranking: Banishing FUD With Structure and Numbers
Amazon VPC Introd