John Viega Jeremy Epstein Why applying standards to Web services is not enough. 25-31 2006 4 IEEE Security & Privacy 4 http://dx.doi.org/10.1109/MSP.2006.110 db/journals/ieeesp/ieeesp4.html#ViegaE06