Web Services Security - O Neill, Mark (McGraw-Hill, 2003)