...suggest the value of improving security during the software development life cycle (SDLC) rather than trying to addressvulnerabilities in software discovered after widespread adoption and deployment. The justification is clear. For software vendors...
http://www.findwhitepapers.com/whitepaper1985/