William Bradley Glisson Andrew McDonald Ray Welland Web engineering security: a practitioner's perspective. 257-264 2006 conf/icwe/2006 ICWE http://doi.acm.org/10.1145/1145581.1145633 db/conf/icwe/icwe2006.html#GlissonMW06