Check out J. D. Meier’s overview of the patterns & practices approach to security engineering, which covers-among other topics-the security frame used to perform security code and design inspections.
http://blogs.msdn.com/jmeier/archive/2008/09/09/patterns-practices-security-engineering.aspx
HTH,
Tom
Thomas W Shinder, M.D., MCSE
Sr. Consultant / Technical Writer
Prowess Consulting www.prowessconsulting.com
PROWESS CONSULTING documentation | integration | virtualization
Email: [email protected]
MVP – Forefront Edge Security (ISA/TMG/IAG)