Security Testing Publication

Here is a very good publication on security testing by
Computer Security Division, National institute of Standards and Tech of USA.
May be the old one, but very intresting and usefull.

http://csrc.nist.gov/publications/nistpubs/800-42/NIST-SP800-42.pdf

Cheers,
-Jerry-