For those of you that have not had the pleasure of hearing Steve Riley present on security -- I encourage you to look up his sessions at TechEd and other conferences.  If you cannot make a conference, you are in luck because he has a forthcoming book, co-authored with Jesper Johansson, and they are now taking pre-orders!