“a guided tour through the wilds of software security”