...planning and ensuring that applications you're developing for the new platform still follow the basic tenets of applicationsecurity. A respected figure within the security industry suggested to me a short while ago that he considers PaaS...
http://www.computerweekly.com/blogs/stuart_king/2008/11/dreamforce-sfdc.html