Software security defects come in two categories: bugs in the code and flaws in the design. In the commercial marketplace, much more attention has been paid to bugs than to flaws. To address this issue head on, the IEEE Center for Secure Design was founded. My presentation will cover the IEEE CSD’s first deliverable by introducing and discussing how to avoid the top ten software security flaws.