Dowd, Mark, and John McDonald. "Security Assessment: Identifying and Preventing Software Vulnerabilities." (2006).