3 ms·

As for books, The Art of Software Security Assessment is frequently recommended, including by members of Project Zero.