A policy-based security framework for Web-enabled applications. - Marian Ventuneac; Tom Coffey; Ioan Salomie (ISICT, 2003)