Principled and practical web application security

Deian Stefan. Principled and practical web application security. PhD thesis, Stanford University, USA, 2015. [doi]