Security usually fails because vulnerabilities and attack scenarios were not envisioned. This is often the weak link in the chain of security. A Vulnerability Assessment (VA) can help to fix the problem, but VAs are often missing or else get confused with other kinds of assessments and security "testing" that are not VAs, and are not very good at finding vulnerabilities. This book is the missing, comprehensive guide for how to actually do quality...