1. Security people should be trained in application development, and application developers should be trained in security.

2. Application security testing tools can help ensure that government applications aren’t opening them up to attack.

3. A new generation of application s