Towards a practical and effective security testing methodology | IEEE Conference Publication | IEEE Xplore