The FxCop ASP.NET security rules have finally been released after being used for quite some time internally.  You can read more about it in this month MSDN magazine

on http://msdn.microsoft.com/en-us/magazine/gg490350.aspx

The rules are available on codeplex at http://fxcopaspnetsecurity.codeplex.com/