title: Spring Security: how to implement Brute Force Detection (BFD)?
body: <p>My web applications security is handled by  <strong>Spring Security</strong> 3.02 but I can't find any out of the box support for Brute Force Detection.</p>
  
  <p>I would like to implement some application level BFD protection. For example by storing failed login attempt per user in the database (JPA). The attacked user accounts could then get a lockout period or a forced account re-activation by e-mail.</p>
  
  <p><em>What's the best way to implement this with Spring Security? Does any body have example code or best practices on this?</em></p>