Application Security Audit eines Workflow-Systems