Here's a tip if you are trying to do some unit testing with Acegi Security - particularly if you are doing role based authorization of method calls on your manager objects via interception. Basically, a secure method interceptor will a) need an authentication token to play with, and b) a way to

find out what authorities the user has.

We need to cater for this when running the tests.

Fortify 360 is an integrated solution for identifying, prioritizing and repairing security vulnerabilities in software and managing the business of assuring application security.

This is the web page for FindBugs, a program which uses static analysis to look for bugs in Java code.