Ижил төстэй зүйлс: Improving web application security:threats and countermeasures; patterns and practices