Security News > 2016 > January > Testing stateful web application workflows (SANS Reading Room)