Application Security

The Open Web Security Project
http://www.owasp.org/index.jsp

National Security Agency application security guides
(includes BEA WebLogic, .NET, Office, Exchange, PKI, SMS)
http://www.nsa.gov/ia/guidance/security_configuration_guides/applications.shtml

National Security Agency database security guides (Oracle, SQL Server) http://www.nsa.gov/ia/guidance/security_configuration_guides/database_servers.shtml

National Security Agency web servers and browsers security guides http://www.nsa.gov/ia/guidance/security_configuration_guides/web_server_and_browser_guides.shtml

Center for Internet Security (Exchange, Oracle, Apache)
http://www.cisecurity.org/

PHP Web application security
ASP Web application security
JSP security
SQL injection protection
Oracle Security guides
MySql security
Adding SSL to Apache

PHP Web Application Security

http://brainbulb.com/talks/php-security-audit-howto.pdf
http://brainbulb.com/talks/php-security-briefing.pdf 

Securing ASP and ASP.NET

ASP.NET Security: 8 Ways to Avoid Attack
http://www.devx.com/security/Article/20898

Securing ASP using Microsoft IIS metabase
http://www.developerfusion.co.uk/show/1831/1/

Securing ASP.NET
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cpguide/html/cpconaspnetwebapplicationsecurity.asp

Securing ASP.Net configuration
http://msdn2.microsoft.com/en-us/library/ms178699

PHP and ASP.NET Go Head-to-Head.
http://www.oracle.com/technology/pub/articles/hull_asp.html

JSP Security

Securing JSP
http://www.developer.com/java/article.php/883381

Java server pages technology
http://java.sun.com/products/jsp/

Securing Your Java Applications
http://www.javalobby.org/articles/acegisecurity/part1.jsp

JavaServer Pages (JSP) various links
http://www.javaworld.com/channel_content/jw-jsp-index.shtml

SQL Injection Protection

Prevent SQL Injection Attacks
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnsqlmag04/html/InjectionProtection.asp

SQL Injection: Are your web application vulnerable?
http://www.cgisecurity.com/lib/SQLInjectionWhitePaper.pdf

Database Security and SQL injection
http://www.cgisecurity.com/development/sql.shtml

Oracle Security Guides

Secure Configuration Guide for Oracle
http://www.oracle.com/technology/deploy/security/oracle9i/pdf/9ir2_checklist.pdf

Oracle Security
http://www.cgisecurity.com/oracle-security.html

MySql Security

General Security Guideline
http://dev.mysql.com/doc/refman/5.0/en/security-guidelines.html

Secure MySql database design
http://www.securityfocus.com/infocus/1667

MySQL Security
http://www.cgisecurity.com/mysql-security.html

Making MySql secure against attackers
http://dev.mysql.com/doc/refman/5.0/en/security-against-attack.html

Adding SSL to Apache

Generating and installing an SSL certificate on an Apache web server with the mod_ssl module
http://slacksite.com/apache/certificate.html

Security Solutions with SSL
http://www.modssl.org/docs/apachecon2001/slide-001-n.html