Art of Software Security Assessment, The