Secure coding guidelines for Java:
https://www.owasp.org/index.php/Java_leading_security_practice#Finality
https://www.securecoding.cert.org/confluence/display/java/SEI+CERT+Oracle+Coding+Standard+for+Java
...
https://www.youtube.com/watch?v=08gdSEeeiS4
Safe Coding Practices:
http://www.safecode.org/publication/SAFECode_Dev_Practices0211.pdf
Threat Modeling Tool in the SDL:
https://www.microsoft.com/en-us/sdl/adopt/threatmodeling.aspx
Intro to secure coding:
intro_secure_coding_20141217.pdf
Learning by breaking: A new project insecure web apps:
Learning_by_Breaking_A_New_Project_Insecure_Web_Apps-Chuck_Willis.ppt