This is pretty dated (June 2003), but is a good writeup of all the security considerations for ASP.NET applications and web services.

At the bottom of the article is a good summary titled "Snapshot of a Secure ASP.NET Application".

Improving Web Application Security

keywords: processModel impersonation authentication machine key machineKey security privilege