Securing Rails
Ruxmon feb 2013 what happened to rails
Triangle.rb - How Secure is Your Rails Site, Anyway?