leastprivilege.com
Publications
Developing more-secure ASP.NET 2.0 Web Applications O’Reilly Amazon Google Guide to claims-based Identity & Access Control 2nd Edition