A group of secure-programming experts plans a series of documents that outline the skills coders need to write Web applications that are better able to withstand attacks.