More practices and details about mitigating exploitable weaknesses are available via on-line resources.
» "2011 CWE/SANS Top 25 Most Dangerous Software Errors" at http://cwe.mitre.org/top25/index.html
» SwA Community Resources and Information Clearinghouse (CRIC) at https://buildsecurityin.us-cert.gov/swa
» Build Security In (BSI) at https://buildsecurityin.us-cert.gov/