Dowd Mark, McDonald John, Schuh Justin. The Art of Software Security Assessment: Identifying and Preventing Software Vulnerabilities

Addison-Wesley Professional, 2006. — 1244 p. — ISBN: 9780321444424.Introduction to Software Security Assessment
Software Vulnerability Fundamentals
Design Review
Operational Review
Application Review Process
Software Vulnerabilities
Memory Corruption
C Language Issues
Program Building Blocks
Strings and Metacharacters
Unix I: Privileges and Files
Unix II: Processes
Windows I: Objects and the File System
Windows II: Interprocess Communication
Synchronization and State
Software Vulnerabilities in Practice
Firewalls
Network Application Protocols
Web Applications
Web Technologies