The Art of Software Security Assessment: Identifying and Preventing Software Vulnerabilities