there've been a couple of sites pointing in the direction of what looks like an interesting security publiscation Security Journal