Source: https://owasp.org/www-pdf-archive//OWASP_Backend_Security_Project_1.0beta.pdf