1. Software Security: Building Security In;McGraw,2006
2. Theresa Lanowitz, Now is the time for security at the application level, Gartner, 2005.
3. Software Security, How to Avoid Security Problems the Right Way;Viega,2006
4. Secure Programming with Static Analysis;Chess,2007
5. Common Weakness Enumeration (CWE): A community-Developed Dictionary of Software Weakness Types. http://cwe.mitre.org/.