This paper is sourced from my Master's thesis which covers what, at the time, I found to be a gap in major security frameworks in addressing the environment/enclave for the development of source. Note that this does not attempt to repeat considerable research involving the development and engineering practices of writing the code in as much as it attempts to provide a framework, background and discussion for the environment used in that process. This paper is a bit dated, and at some point I do hope to refresh it to include virtual routing and logically secured virtual machines / virtual desktop infrastructures.
I warn you in advance, this is written more like a whitepaper than formal research (as adapted) and could use considerable cleanup. It is still relevant and has a bit of good information for those looking to undertake such a task though.
That said, the document is available here