We have been working on this project for some time now. It is a http module to protect web applications from certain attacks.

http://blogs.msdn.com/cisg/archive/2008/10/24/a-sneak-peak-at-the-security-runtime-engine.aspx

Thanks
RV