How to Break Web Software: Functional and Security Testin - Mike Andrews, James A. Whittaker (Addison-Wesley, 2006)