英文原版《Building Secure Software：How to avoid security problems the right way》By John Viega and Gary McGraw,PDF格式。