Implementing a comprehensive application security progaram - Tawfiq
Advanced Persistent Threat & Effective Counter Actions By Dave Whipple, CISSP, CISA, NSA-IAM/IEM