The New School Of Information Security by Andrew Stewart & Adam Shostack