Les Hatton, Safer Subsets.
5.5 Software Security Analysis and Testing
Security analyses and tests, including code review and vulnerability assessment,
collectively represent the most widespread of best practices for software security