Security, the experts like to tell us, is a process, not a product. With open source that can be a very good thing since when security problems are found they can be fixed quickly. That's the case over this last weekend, Feb. 9-10, when a security problem was found, and given a hot fix

Through real world business scenarios, developers will learn to protect their web applications from attacks using Spring Security 3 and implement basic authorization and credential storage. Readers will be introduced to basic fundamentals of Spring Security 3 like setup and configuration as well as security concepts and techniques.

Open source security software can be very effective at keeping the bad guys off your network, but it can also be hard to configure and time consuming to keep patched and up to date.

Do you think you are safe with Firefox? In general, I would agree with you. But at the same time, I would also point out that there is a fairly sizable security concern that may be addressed, as effectively as some security experts might like. It's called the Firefox extension.

There's no such thing as perfect security. There are no programs that give you absolute software security. After all, security is a process, not a product. Linux's security process, though, is outstanding, which is one reason why it has great security. Here's an example.

The key to IT security is secure software - software that is written with not only features, but also security, in mind, says David Jacobson, technical director at Linux services company Synaq.

Open source software (OSS) is not impenetrable, and will likely be an increasing target of hackers if it grows in adoption, said a security expert.

Network Security Toolkit is one of many live CD Linux distributions focusing on network monitoring, analysis, and security. NST was designed to give network security administrators easy access to a comprehensive set of open source network applications, many of which are among the top 100 security tools recommended by insecure.org.

Architecture created by the National Security Agency and expanded with help from the open-source community will save the Defense Department and intelligence agencies millions in hardware costs.