Microsoft has released a massive 919 page ebook covering everything from how to lock down
your web server, web services, web applications, and web application servers. This book is worth
a read and I highly recommend it.
Improving Web Application Security: Threats and Countermeasures, June 2003 (PDF) (6.7 Meg)
