A framework and theory for cyber security assessments
Low-level software security: Attacks and defenses