2007-04-23 The business case for security frameworks http://www.webappsec.org/projects/articles/042307.shtml