High- Assurance Design: architecting secure and reliable enterprise applications - Clifford J. Berg (Addison-Wesley)