http://www.cisecurity.org/resources-publications/
https://www.owasp.org/index.php/Securing_tomcat
...
References
http://blogs.mulesoft.org/is-your-tomcat-secure/ - looks like a good lead.
http://www.cisecurity.org/resources-publications/
https://www.owasp.org/index.php/Securing_tomcat
...
http://blogs.mulesoft.org/is-your-tomcat-secure/ - looks like a good lead.