Hack-proofing your ASP.NET applications. IN ASP.NET security. - Tuliper, Adam (MSDN magazine)