https://frenchw.net/2005/11/09/security_code_review_for_managed_code/