I wanted to use this blog to draw attention to some of the technical articles that we produce around Windows Mobile.  That's part of my responsibility here at Microsoft.  Since I actually wrote this one - and that's a rarity - I thought I'd start by drawing attention to this one.  I've tried to pull all the relevant information together about Smartphone Application Security model in one place.  It took a little while for me to wrap my head round some of the tougher concepts but I think it's all there now.  There's prescriptive guidance on setting up your tools, querying information out of your phone as well as plenty of background theory.  If it helps you, please rate it kindly!

http://msdn.microsoft.com/library/en-us/dnsmtphn2k3/html/smartphone_security.asp