http://www.microsoft.com/china/msdn/library/architecture/architecture/architecturetopic/ImpWebSec/IWsecmod80.mspx