Manyebook
Gary McGraw
Building Secure Software
Software Security