For Further Reading
Code Analysis, (Washington, DC: US CERT).
White Box Testing, (Washington, DC: US CERT).
Michael Howard (Microsoft Corporation), “A Process for Performing Security Code Reviews”, IEEE