Security tests for REST API servers
blog.vaddy.net