Mark Burnett, who is the author of "Hacking the Code", has a couple of great articles posted to the OWASP site.

Both are must read articles!