Application Security in the age of Open Source by Ron De Jong