Mark Bristow and myself spoke at Refresh DC this week, on the topic of Web Application Security.
Here is that presentation as PDF, as PPT, or you can view it on Adobe’s Share service (though there are conversion issues with images on the title page).