recommended reading: security engineering

ross anderson's highly regarded [and somewhat expensive] book security engineering: a guide to building dependable distributed systems is now available online. there is even an audio book in progress.