Looking for informaton on Drupal core security process, audits and benchmarking
There are 2 websites you should look at, http://buytaert.net/greg-knaddison-and-drupal-security and http://crackingdrupal.com.