Software security needs to take a holistic approach from the earliest stages of the development cycle. Below I’ve complied a list of links with information on implementing and adhering to security best practices, form the early coding and testing phase through to post launch and maintaining updates.

http://searchsecurity.techtarget.com/essentialguide/How-to-develop-software-the-secure-Gary-McGraw-way