Test-Driven Security(blog.pentesterlab.com)

http://blog.pentesterlab.com/2012/12/test-driven-security.html