Reducing the number of security vulnerabilities in web applications by improving software quality

Contrary to popular beliefs, (web) application security is a quality management problem and must be treated as such. Security flaws are actually bugs and affect the quality of software the same way as functional bugs do. If we don't accept this and attempt to treat the problem differently, we are going to fail.