security web application security secure coding techniques access control cross site scripting penetration testing php secure software development smart card deployment alarm security code review xss security threat model secure coding standards smart card module cctv risk management