http://www.owasp.org/index.php/Podcast_26

http://www.qasec.com/2009/06/setting-the-appropriate-security-defect-handling-expectations-in-development-and-qa.html

http://websecuritytool.codeplex.com/