This week's book giveaway is in the OCAJP 8 forum. We're giving away four copies of OCA Java SE 8 Programmer I Study Guide and have Edward Finegan & Robert Liguori on-line! See this thread for details.
I want to know about CSRF(Cross Sit Request Frogery) attack and what are various solutions using which i can prevent this attack.
Also provide views on which is the best solution which I can implement and how should I test my site for this attack and other breaches.
Tomcat higher versions (I guess 7.x) has got built-in support for CSRF module you can download source code and have a look on that .There are some open-source libraries available ,one such exist from OWASP org known as OWASP CSRF Guard (I am not sure about its current limitations). A CSRF framework which works on Session/Request Token Synchronization Patterns would be a optimal solution.
As a security standards your application must be secured enough atleast from the following type of vulnarabilities
Appart from the manual testing you should use some tools for testing. Example WebInspect From HP or Rational App Scan from IBM. I have not yet used any opensource validation tools yet.
spend some time on https://www.owasp.org and education videos on web-security at You-Tube