I need some pointers to any resources (videos from any conferences or general videos, pdf, anything) for secure source code reviewing of multi-tiered web-apps in JAX-WS, Spring or Hibernate. I am especially interested in know what are the security vulnerabilities that can occur when using these specific frameworks. I am currently reading the Chapters 17, 18 and 19 of the 2nd edition of Web Application's Hacker's Handbook. I think its good but I get a feeling that it just scratches the surface (or a kind of intro stuff). I'm not saying its not good, but I want to read more about it. Any links would be helpful.