Security Testing

Hi everybody,
I was wondering if some of you have some papers regarding web applications security testing. I'm working on a CMM iniciative and we are planning to include a security testing phase so every new developed application is security-error free.

Would you recommend every development team to perform security testing or it's better to have a group of experienced people doing these activities for all of the developed applications?

Best regards,
Manuel Received on Mon Mar 3 13:29:27 2003