Web Application Security Audit eines komplexen Workflow-Systems