It is "The Art of Software Security Assessment: Identifying and Preventing Software Vulnerabilities"