Describir: The art of software security assessment :