Web Services Security (McGraw-Hill, 2003)