Peter G. Neumann
SRI International EL-243, Menlo Park CA
A testing framework for Web application security assessment
Computer Networks: The International Journal of Computer and Telecommunications Networking - Web security