attacks-on-application-service-providers