Here are a couple of great books about web/software security:
http://www.amazon.com/The-Web-Application-Hackers-Handbook/d...
http://www.amazon.com/Deadly-Sins-Software-Security-One-off/...
http://www.amazon.com/The-Web-Application-Hackers-Handbook/d...
http://www.amazon.com/Deadly-Sins-Software-Security-One-off/...
I can't stand "Deadly Sins".
I'd replace it with _The Tangled Web_, Zalewski's new web security book; WAHH and _Tangled_ is a formidable amount of knowledge to keep on tap.