Securing your ASP.NET applications. IN ASP.NET Security. - Tuliper, Adam (MSDN magazine)