The Bellovin and Cheswick book(s) although it's more about network security and firewalls.

The OWASP guides.
Practical UNIX and Internet security Book by Simson Garfinkel