The Security Development Lifecycle by Michael Howard & Steve Lipner