State of Application Assessment
John Steven · IEEE Security & Privacy · 2008
We've finished the missionary work: people know software's the problem. The question has become how do we find which of our systems are most vulnerable and why? This article looks at the state of assessment practice and offers some suggestions.