security lifecycle

Security isn't something I like to think about, but for applications that have a large number of users it's a real consideration.

This artical talks about not just about the act of 'securing code', but about integrating it into your development process.


How Do They Do It? A Look Inside the Security Development Lifecycle at Microsoft -- MSDN Magazine, November 2005

good links:
application verifier
PreFast
SAL