leastprivilege.com
FXCop Rules for WCF Security
That may be worth a look: