Trading off usability and security in user interface design through mental models
Security models for web-based applications