Hacking the code ASP.NET web application security - Burnett, Mark M. (Syngress Publ., 2004)
Includes index.