How to break web software : functional and security testing of web applications and web services - Andrews, Mike (Addison-Wesley, 2006)