this may be of interest, I've been chatting to the author today actually. https://db.usenix.org/events/leet10/tech/full_papers/Checkow...

The site is secure but can always do better.