Tal0n has just finished a long paper on code auditing. Check it out here.