Apache Tomcat Security Handbook
Tomcat is the official reference implementation for the Java servlet and Java Server Pages technologies and is heralded as an excellent platform for the development and deployment of Web applications. It can either run as a stand-alone server or integrate itself with the Apache webserver.