Hands-on Application Security Challenges: Mastering Real-World Cyber Defens