Text this: The art of software security assessment :