Security is a process, not a product, and adopting a sound approach to security during the process of application development will allow you to produce tighter, more robust code.