You know I've been posting my favorite links to http://del.icio.us/rido, but this one is a good security guide to protect applications so I want to post it here
 
 
It covers Asp.Net, Java, WebServices and more…