Security software development assessing and managing security risks - Ashbaugh (CRC Press, 2009)