Good Web application security resource

In typical monster corporation style, Hewlett-Packard's Web site is painfully difficult to browse around, much less find what you're looking for when it comes to, well, pretty much anything. There is an exception however that benefits all of us in information security. It's HP's Application Security Center Resource Library. It's chock full of goodies from HP (and former SPI Dynamics) engineers, developers, and Web security evangelists.

In addition to more recent material, there are links to several whitepapers and articles I authored/ghost-authored for SPI Dynamics a few years back on regulatory compliance and performing Web vulnerability assessments (under the Technical Approaches and Legal and Regulatory Compliance headings). You may also want to check out their blogs under the HP Security Labs heading. Again, yucky user experience but great information if you can find your way through the thicket.

All in all a good resource for Web security if you're looking to brush up on the subject.