vulnerability research approach

hi there:
    i'd like to find some vulnerabilities. i am a anti-virus analysis
before, so i'm experienced with disassembling, Windows API
programming, IDA, OllyDBG, SoftICE and other tools.
    My question is where to start the vulnerability research? thank
you for sharing your experience.

--
http://www.lwang.org
lwang.org provides online base64 encode and decode, crc32 md5 and sha1
hashing, online ciphers, encryption and decryption. We are engaged in
adding more common use lookup service.
We collect spam for research at abryson_at_bytefocus.com