Andreu, Professional Pen Testing for Web Applications (Indianapolis, IN: Wrox/Wiley Publishing Inc.,
2006). Also see: Tom Gallagher, et al., Hunting Security Bugs (Redmond, WA: Microsoft Press, 200).
Software Security Assurance State-of-the-Art Report (SOAR) 223
Section 5 SDLC Processes and Methods and the Security of Software