The art of software security assessmentMark Dowd, John McDonald, Justin Schuh · First published 2006Open the Tome