The Bellovin and Cheswick book(s) although it's more about network security and firewalls.The OWASP guides.Practical UNIX and Internet security Book by Simson Garfinkel