Code Auditing by John McDonald & Mark Dowd