RT for protocol testing nerds: a master thesis and GSoC project about WS penetration testing.
There is also an interesting chapter about WS usage and adoption in Android apps ..
my master's thesis is now available online:
Feel free to share it as you like. Thanks for helping me out to understand the term "TCP-clean". My master's thesis is based on my Google Summer of Code Project 2012 (http://code.google.com/p/zaproxy/).