Source: https://owasp.org/www-chapter-geneva/assets/slides/OWASP_Geneva-2015_03_02-Alain_Sullam-CUCKOO.pdf