Mattj: Thanks. But I'm searching for papers where people are actually having a look into how secure XMPP servers are (e.g. with negative examples). Probably the wrong room for such a question 🙂