/2006/09/08/nist-releases-recommendations-for-securing-web-services
https://www.shahidshah.com/blog/nist-releases-recommendations-for-securing-web-services