Security principles for web applications | IEEE Conference Publication | IEEE Xplore