%% You should probably cite draft-hodges-websec-framework-reqs-02 instead of this revision.
@techreport{hodges-websec-framework-reqs-01,
    number =    {draft-hodges-websec-framework-reqs-01},
    type =      {Internet-Draft},
    institution =   {Internet Engineering Task Force},
    publisher = {Internet Engineering Task Force},
    note =      {Work in Progress},
    url =       {https://datatracker.ietf.org/doc/draft-hodges-websec-framework-reqs/01/},
    author =    {Jeff Hodges},
    title =     {{Web Security Framework: Problem Statement and Requirements}},
    pagetotal = 23,
    year =      2011,
    month =     sep,
    day =       8,
    abstract =  {Web-based malware and attacks are proliferating rapidly on the Internet. New web security mechanisms are also rapidly growing in number, although in an incoherent fashion. This document provides a brief overview of the present situation and the various seemingly piece-wise approaches being taken to mitigate the threats. It then provides an overview of requirements as presently being expressed by the community in various online and face-to-face discussions.},
}