proactive web application defense strategy