On Scalable Security Audit for Web Application According to ISO 27002. - Wojciech Bylica; Bogdan Ksiezopolski (CN, 2011)