Protecting Web services and Web applications against