Security topics

I am not a security expert but the following are some resource and links that I think are useful in this area. Thanks to anyone that has brought one of these things to my attention.

Articles and documentation

Hardening web services [in Windows Server 2008]
Improving Web Application Security: Threats and Countermeasures
Building Secure ASP.NET Applications
Improving Web Application Security

IIS7 Security

Tools

Urlscan