Security by Design

OWASP Security Design Principles

Apply these during design -- retrofitting security is 10-100x more expensive.