Further Reading

Mark Dowd et al
The Art of Software Security Assessment: Identifying and Preventing Software Vulnerabilities (Addison-Wesley, 2007)

Fuzzing

Michael Sutton et al
Fuzzing: Brute Force Vulnerability Discovery