I came across this new whitepaper from NGS (David Litchfield’s company). It is about how automated scanners/attack tools work and how you could modify your web applications to make these kind of tools less successful. interesting read.