Security engineering

Advice on Security Engineering from Microsoft Patterns and Practices. Including security checklists for ASP.NET 2.0

In fact, there is a huge amount of information available on making websites more secure.