European Network and Information Security Agency (ENISA), Web 2.0 Security and Privacy: Position Paper (Dec. 2008) (full-text).