Web services security (McGraw-Hill, 2003)