Check out J. D. Meier’s overview of the patterns & practices approach to security engineering, which covers—among other topics—the security frame used to perform security code and design inspections.

http://blogs.msdn.com/jmeier/archive/2008/09/09/pa...g.aspx

HTH,

Tom

Thomas W Shinder, M.D., MCSE
Sr. Consultant / Technical Writer
Prowess Consulting www.prowessconsulting.com
PROWESS CONSULTING documentation | integration | virtualization
Email: tshinder@isaserver.org
MVP — Forefront Edge Security (ISA/TMG/IAG)