Drupal Security Report

Several months ago I began work with GVS on a report to analyze and discuss Drupal security. Unlike the existing documentation, handbook pages, and book, this paper would be an authoritative resource about the state of Drupal security; discussing the built-in answers Drupal provides against critical and common security risks and researching the causes and concerns with known Drupal vulnerabilities.

At DrupalCon San Francisco we published the paper, with the help of our sponsors, on http://drupalsecurityreport.org.