Irfan A. Chaudhry, et al., Web Application Security Assessment, (Microsoft Press, 2003).
James A. Whittaker and Herbert H. Thompson, How to Break Software Security, (Addison Wesley, 2003).
5.5.1.1 When to Perform Analyses and Tests
It is safe to assert that all software security practitioners would agree that the