25 ways to insecurity
The 2009 CWE/SANS Top 25 Most Dangerous Programming Errors was recently released by CWE/SANS. Most of the items are old news but I think it is a good checklist that should be on the boiler plate for web application design documents. By putting security requirements in the software specification and design documents, the project manager [...]

