[fromdoon]

Hi, Is there any resource on Web or even any book that documents all the risks. I had once seen a talk given by you .. was good !! Any other such resources out there ??

[tptacek]

I like _The Art of Software Security Assessment_ for this.