The theme is developing new applications securely and adding security to legacy applications - both standard and web-based. Addressing the issue that many experts are realising that the vast majority of today’s vulnerabilities can be tracked back to shortcomings in application coding, and repeated design failures whereby business-critical applications are simply not able to function as part of today's pervasive security and authentication architectures.