Towards Self-Protecting Enterprise Applications