API Security in Action - Madden (IEEE, 2003)