Hi, Every once in a while the question "how can I learn how to audit software" comes up here.
I just received "The Art of Software Security Assesment" by Mark Dowd et. al. I ordered it because another OpenBSd developer recommended it. Browsing through it it really seems a nice book. So I think I can recommend it to anybody wanting to learn code auditing. -Otto