Application Security Assessment Methodology

http://www.bgdsoftware.com/security/security_assessment.htm
http://www.counterpane.com/application-security-assessment.html