gradual recognition that the network- and operating system-level protections
that are now commonplace for protecting Internet-accessible systems are no
longer sufficient for that purpose. This recognition has given use to emerging
application security measures to augment system and network security