Web application vulnerability detection and prevention: revealing little-known attack methods and defense techniques