The process of focusing security efforts during the development cycle. Involves using secure design patterns.