Towards a Formal Foundation of Web Security | IEEE Conference Publication | IEEE Xplore