Security software development assessing and managing security risks - Ashbaugh, Douglas A. (CRC Press, 2009)