Securing Web Based Transaction Services. - John J. Lombardi (2003)