Don't forget the sans reading room or security focus

http://www.sans.org/rr/

http://www.securityfocus.com

Lots of good papers there.