How to Proactively Protect Web Applications