Methods for assessing application software security